Warning: Permanently added '[localhost]:57269' (ECDSA) to the list of known hosts.
2022/10/31 12:33:25 fuzzer started
2022/10/31 12:33:25 dialing manager at localhost:40945
syzkaller login: [   40.635119] cgroup: Unknown subsys name 'net'
[   40.745894] cgroup: Unknown subsys name 'rlimit'
2022/10/31 12:33:38 syscalls: 2217
2022/10/31 12:33:38 code coverage: enabled
2022/10/31 12:33:38 comparison tracing: enabled
2022/10/31 12:33:38 extra coverage: enabled
2022/10/31 12:33:38 setuid sandbox: enabled
2022/10/31 12:33:38 namespace sandbox: enabled
2022/10/31 12:33:38 Android sandbox: enabled
2022/10/31 12:33:38 fault injection: enabled
2022/10/31 12:33:38 leak checking: enabled
2022/10/31 12:33:38 net packet injection: enabled
2022/10/31 12:33:38 net device setup: enabled
2022/10/31 12:33:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/31 12:33:38 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/31 12:33:38 USB emulation: enabled
2022/10/31 12:33:38 hci packet injection: enabled
2022/10/31 12:33:38 wifi device emulation: enabled
2022/10/31 12:33:38 802.15.4 emulation: enabled
2022/10/31 12:33:38 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/31 12:33:38 fetching corpus: 50, signal 23672/27349 (executing program)
2022/10/31 12:33:38 fetching corpus: 100, signal 44154/49209 (executing program)
2022/10/31 12:33:38 fetching corpus: 150, signal 55759/62186 (executing program)
2022/10/31 12:33:38 fetching corpus: 200, signal 64066/71793 (executing program)
2022/10/31 12:33:38 fetching corpus: 250, signal 72826/81704 (executing program)
2022/10/31 12:33:38 fetching corpus: 300, signal 78441/88488 (executing program)
2022/10/31 12:33:38 fetching corpus: 350, signal 82789/93993 (executing program)
2022/10/31 12:33:39 fetching corpus: 400, signal 87427/99753 (executing program)
2022/10/31 12:33:39 fetching corpus: 450, signal 92261/105589 (executing program)
2022/10/31 12:33:39 fetching corpus: 500, signal 95378/109763 (executing program)
2022/10/31 12:33:39 fetching corpus: 550, signal 99472/114772 (executing program)
2022/10/31 12:33:39 fetching corpus: 600, signal 105076/121097 (executing program)
2022/10/31 12:33:39 fetching corpus: 650, signal 108695/125595 (executing program)
2022/10/31 12:33:39 fetching corpus: 700, signal 111136/129014 (executing program)
2022/10/31 12:33:39 fetching corpus: 750, signal 113960/132697 (executing program)
2022/10/31 12:33:40 fetching corpus: 800, signal 117847/137298 (executing program)
2022/10/31 12:33:40 fetching corpus: 850, signal 120517/140785 (executing program)
2022/10/31 12:33:40 fetching corpus: 900, signal 122375/143493 (executing program)
2022/10/31 12:33:40 fetching corpus: 950, signal 123884/145862 (executing program)
2022/10/31 12:33:40 fetching corpus: 1000, signal 127316/149840 (executing program)
2022/10/31 12:33:40 fetching corpus: 1050, signal 129359/152587 (executing program)
2022/10/31 12:33:40 fetching corpus: 1100, signal 131434/155381 (executing program)
2022/10/31 12:33:40 fetching corpus: 1150, signal 133486/158174 (executing program)
2022/10/31 12:33:40 fetching corpus: 1200, signal 135692/161042 (executing program)
2022/10/31 12:33:40 fetching corpus: 1250, signal 137795/163793 (executing program)
2022/10/31 12:33:40 fetching corpus: 1300, signal 139611/166270 (executing program)
2022/10/31 12:33:41 fetching corpus: 1350, signal 141764/168931 (executing program)
2022/10/31 12:33:41 fetching corpus: 1400, signal 143389/171180 (executing program)
2022/10/31 12:33:41 fetching corpus: 1450, signal 145827/174007 (executing program)
2022/10/31 12:33:41 fetching corpus: 1500, signal 147591/176285 (executing program)
2022/10/31 12:33:41 fetching corpus: 1550, signal 149140/178423 (executing program)
2022/10/31 12:33:41 fetching corpus: 1600, signal 150504/180354 (executing program)
2022/10/31 12:33:41 fetching corpus: 1650, signal 151914/182327 (executing program)
2022/10/31 12:33:41 fetching corpus: 1700, signal 153972/184728 (executing program)
2022/10/31 12:33:42 fetching corpus: 1750, signal 155652/186866 (executing program)
2022/10/31 12:33:42 fetching corpus: 1800, signal 158295/189644 (executing program)
2022/10/31 12:33:42 fetching corpus: 1850, signal 160436/192060 (executing program)
2022/10/31 12:33:42 fetching corpus: 1900, signal 162387/194318 (executing program)
2022/10/31 12:33:42 fetching corpus: 1950, signal 163495/195931 (executing program)
2022/10/31 12:33:42 fetching corpus: 2000, signal 164881/197713 (executing program)
2022/10/31 12:33:42 fetching corpus: 2050, signal 166778/199846 (executing program)
2022/10/31 12:33:42 fetching corpus: 2100, signal 168190/201612 (executing program)
2022/10/31 12:33:43 fetching corpus: 2150, signal 169564/203315 (executing program)
2022/10/31 12:33:43 fetching corpus: 2200, signal 170662/204843 (executing program)
2022/10/31 12:33:43 fetching corpus: 2250, signal 171676/206304 (executing program)
2022/10/31 12:33:43 fetching corpus: 2300, signal 173281/208133 (executing program)
2022/10/31 12:33:43 fetching corpus: 2350, signal 174352/209581 (executing program)
2022/10/31 12:33:43 fetching corpus: 2400, signal 176650/211779 (executing program)
2022/10/31 12:33:43 fetching corpus: 2450, signal 178001/213358 (executing program)
2022/10/31 12:33:44 fetching corpus: 2500, signal 179208/214837 (executing program)
2022/10/31 12:33:44 fetching corpus: 2550, signal 179999/216028 (executing program)
2022/10/31 12:33:44 fetching corpus: 2600, signal 181543/217635 (executing program)
2022/10/31 12:33:44 fetching corpus: 2650, signal 182425/218931 (executing program)
2022/10/31 12:33:44 fetching corpus: 2700, signal 183537/220281 (executing program)
2022/10/31 12:33:44 fetching corpus: 2750, signal 184516/221476 (executing program)
2022/10/31 12:33:44 fetching corpus: 2800, signal 185610/222825 (executing program)
2022/10/31 12:33:44 fetching corpus: 2850, signal 186920/224230 (executing program)
2022/10/31 12:33:45 fetching corpus: 2900, signal 187978/225464 (executing program)
2022/10/31 12:33:45 fetching corpus: 2950, signal 188863/226588 (executing program)
2022/10/31 12:33:45 fetching corpus: 3000, signal 190242/227960 (executing program)
2022/10/31 12:33:45 fetching corpus: 3050, signal 191269/229141 (executing program)
2022/10/31 12:33:45 fetching corpus: 3100, signal 192312/230272 (executing program)
2022/10/31 12:33:45 fetching corpus: 3150, signal 193425/231456 (executing program)
2022/10/31 12:33:45 fetching corpus: 3200, signal 194304/232517 (executing program)
2022/10/31 12:33:45 fetching corpus: 3250, signal 195303/233616 (executing program)
2022/10/31 12:33:46 fetching corpus: 3300, signal 196185/234638 (executing program)
2022/10/31 12:33:46 fetching corpus: 3350, signal 197226/235745 (executing program)
2022/10/31 12:33:46 fetching corpus: 3400, signal 197901/236650 (executing program)
2022/10/31 12:33:46 fetching corpus: 3450, signal 198867/237686 (executing program)
2022/10/31 12:33:46 fetching corpus: 3500, signal 199719/238671 (executing program)
2022/10/31 12:33:46 fetching corpus: 3550, signal 200357/239494 (executing program)
2022/10/31 12:33:46 fetching corpus: 3600, signal 201015/240357 (executing program)
2022/10/31 12:33:46 fetching corpus: 3650, signal 201535/241121 (executing program)
2022/10/31 12:33:47 fetching corpus: 3700, signal 202685/242180 (executing program)
2022/10/31 12:33:47 fetching corpus: 3750, signal 203356/243057 (executing program)
2022/10/31 12:33:47 fetching corpus: 3800, signal 204031/243877 (executing program)
2022/10/31 12:33:47 fetching corpus: 3850, signal 205214/244922 (executing program)
2022/10/31 12:33:47 fetching corpus: 3900, signal 205853/245681 (executing program)
2022/10/31 12:33:47 fetching corpus: 3950, signal 207000/246645 (executing program)
2022/10/31 12:33:47 fetching corpus: 4000, signal 208067/247584 (executing program)
2022/10/31 12:33:47 fetching corpus: 4050, signal 208985/248418 (executing program)
2022/10/31 12:33:48 fetching corpus: 4100, signal 209831/249242 (executing program)
2022/10/31 12:33:48 fetching corpus: 4150, signal 210719/250039 (executing program)
2022/10/31 12:33:48 fetching corpus: 4200, signal 212113/251020 (executing program)
2022/10/31 12:33:48 fetching corpus: 4250, signal 212757/251703 (executing program)
2022/10/31 12:33:48 fetching corpus: 4300, signal 213273/252382 (executing program)
2022/10/31 12:33:48 fetching corpus: 4350, signal 213875/253057 (executing program)
2022/10/31 12:33:48 fetching corpus: 4400, signal 214454/253711 (executing program)
2022/10/31 12:33:48 fetching corpus: 4450, signal 215079/254362 (executing program)
2022/10/31 12:33:49 fetching corpus: 4500, signal 215801/255014 (executing program)
2022/10/31 12:33:49 fetching corpus: 4550, signal 216344/255649 (executing program)
2022/10/31 12:33:49 fetching corpus: 4600, signal 217003/256293 (executing program)
2022/10/31 12:33:49 fetching corpus: 4650, signal 217992/257001 (executing program)
2022/10/31 12:33:49 fetching corpus: 4700, signal 218626/257615 (executing program)
2022/10/31 12:33:49 fetching corpus: 4750, signal 219130/258164 (executing program)
2022/10/31 12:33:49 fetching corpus: 4800, signal 219723/258752 (executing program)
2022/10/31 12:33:49 fetching corpus: 4850, signal 220558/259402 (executing program)
2022/10/31 12:33:50 fetching corpus: 4900, signal 220940/259892 (executing program)
2022/10/31 12:33:50 fetching corpus: 4950, signal 221635/260495 (executing program)
2022/10/31 12:33:50 fetching corpus: 5000, signal 222470/261108 (executing program)
2022/10/31 12:33:50 fetching corpus: 5050, signal 223159/261723 (executing program)
2022/10/31 12:33:50 fetching corpus: 5100, signal 223715/262271 (executing program)
2022/10/31 12:33:50 fetching corpus: 5150, signal 224241/262758 (executing program)
2022/10/31 12:33:50 fetching corpus: 5200, signal 225118/263333 (executing program)
2022/10/31 12:33:50 fetching corpus: 5250, signal 225498/263786 (executing program)
2022/10/31 12:33:51 fetching corpus: 5300, signal 226048/264245 (executing program)
2022/10/31 12:33:51 fetching corpus: 5350, signal 226880/264797 (executing program)
2022/10/31 12:33:51 fetching corpus: 5400, signal 227448/265288 (executing program)
2022/10/31 12:33:51 fetching corpus: 5450, signal 228055/265750 (executing program)
2022/10/31 12:33:51 fetching corpus: 5500, signal 228624/266194 (executing program)
2022/10/31 12:33:51 fetching corpus: 5550, signal 229547/266703 (executing program)
2022/10/31 12:33:51 fetching corpus: 5600, signal 230215/267169 (executing program)
2022/10/31 12:33:51 fetching corpus: 5650, signal 230703/267610 (executing program)
2022/10/31 12:33:52 fetching corpus: 5700, signal 231036/267967 (executing program)
2022/10/31 12:33:52 fetching corpus: 5750, signal 231603/268409 (executing program)
2022/10/31 12:33:52 fetching corpus: 5800, signal 232121/268810 (executing program)
2022/10/31 12:33:52 fetching corpus: 5850, signal 232697/269194 (executing program)
2022/10/31 12:33:52 fetching corpus: 5900, signal 233109/269559 (executing program)
2022/10/31 12:33:52 fetching corpus: 5950, signal 233531/269926 (executing program)
2022/10/31 12:33:52 fetching corpus: 6000, signal 233817/270253 (executing program)
2022/10/31 12:33:52 fetching corpus: 6050, signal 234359/270618 (executing program)
2022/10/31 12:33:53 fetching corpus: 6100, signal 235072/270974 (executing program)
2022/10/31 12:33:53 fetching corpus: 6150, signal 235521/271303 (executing program)
2022/10/31 12:33:53 fetching corpus: 6200, signal 236153/271630 (executing program)
2022/10/31 12:33:53 fetching corpus: 6250, signal 236465/271952 (executing program)
2022/10/31 12:33:53 fetching corpus: 6300, signal 237026/272281 (executing program)
2022/10/31 12:33:53 fetching corpus: 6350, signal 237673/272597 (executing program)
2022/10/31 12:33:53 fetching corpus: 6400, signal 238021/272887 (executing program)
2022/10/31 12:33:53 fetching corpus: 6450, signal 238589/273151 (executing program)
2022/10/31 12:33:53 fetching corpus: 6500, signal 239032/273430 (executing program)
2022/10/31 12:33:54 fetching corpus: 6550, signal 239438/273713 (executing program)
2022/10/31 12:33:54 fetching corpus: 6600, signal 239917/274008 (executing program)
2022/10/31 12:33:54 fetching corpus: 6650, signal 240259/274264 (executing program)
2022/10/31 12:33:54 fetching corpus: 6700, signal 240796/274533 (executing program)
2022/10/31 12:33:54 fetching corpus: 6750, signal 241544/274800 (executing program)
2022/10/31 12:33:54 fetching corpus: 6800, signal 242027/274918 (executing program)
2022/10/31 12:33:54 fetching corpus: 6850, signal 242596/274918 (executing program)
2022/10/31 12:33:54 fetching corpus: 6900, signal 243032/274918 (executing program)
2022/10/31 12:33:55 fetching corpus: 6950, signal 243410/274934 (executing program)
2022/10/31 12:33:55 fetching corpus: 7000, signal 243802/274934 (executing program)
2022/10/31 12:33:55 fetching corpus: 7050, signal 244223/274936 (executing program)
2022/10/31 12:33:55 fetching corpus: 7100, signal 244843/274936 (executing program)
2022/10/31 12:33:55 fetching corpus: 7150, signal 245196/274936 (executing program)
2022/10/31 12:33:55 fetching corpus: 7200, signal 245498/274937 (executing program)
2022/10/31 12:33:55 fetching corpus: 7250, signal 245835/274950 (executing program)
2022/10/31 12:33:55 fetching corpus: 7300, signal 246127/274950 (executing program)
2022/10/31 12:33:56 fetching corpus: 7350, signal 246575/275021 (executing program)
2022/10/31 12:33:56 fetching corpus: 7400, signal 247108/275021 (executing program)
2022/10/31 12:33:56 fetching corpus: 7450, signal 247468/275024 (executing program)
2022/10/31 12:33:56 fetching corpus: 7500, signal 247826/275028 (executing program)
2022/10/31 12:33:56 fetching corpus: 7550, signal 248236/275028 (executing program)
2022/10/31 12:33:56 fetching corpus: 7600, signal 248713/275028 (executing program)
2022/10/31 12:33:56 fetching corpus: 7650, signal 249334/275028 (executing program)
2022/10/31 12:33:56 fetching corpus: 7700, signal 249732/275028 (executing program)
2022/10/31 12:33:56 fetching corpus: 7750, signal 250277/275028 (executing program)
2022/10/31 12:33:57 fetching corpus: 7800, signal 250853/275028 (executing program)
2022/10/31 12:33:57 fetching corpus: 7850, signal 251316/275028 (executing program)
2022/10/31 12:33:57 fetching corpus: 7900, signal 251704/275028 (executing program)
2022/10/31 12:33:57 fetching corpus: 7950, signal 252249/275028 (executing program)
2022/10/31 12:33:57 fetching corpus: 8000, signal 252630/275033 (executing program)
2022/10/31 12:33:57 fetching corpus: 8050, signal 253016/275033 (executing program)
2022/10/31 12:33:57 fetching corpus: 8100, signal 253339/275034 (executing program)
2022/10/31 12:33:57 fetching corpus: 8150, signal 254031/275039 (executing program)
2022/10/31 12:33:58 fetching corpus: 8200, signal 254413/275039 (executing program)
2022/10/31 12:33:58 fetching corpus: 8250, signal 254816/275039 (executing program)
2022/10/31 12:33:58 fetching corpus: 8300, signal 255238/275039 (executing program)
2022/10/31 12:33:58 fetching corpus: 8350, signal 255435/275040 (executing program)
2022/10/31 12:33:58 fetching corpus: 8400, signal 255805/275040 (executing program)
2022/10/31 12:33:58 fetching corpus: 8450, signal 256140/275043 (executing program)
2022/10/31 12:33:58 fetching corpus: 8500, signal 256581/275043 (executing program)
2022/10/31 12:33:58 fetching corpus: 8550, signal 257151/275044 (executing program)
2022/10/31 12:33:58 fetching corpus: 8600, signal 257473/275049 (executing program)
2022/10/31 12:33:59 fetching corpus: 8650, signal 257886/275049 (executing program)
2022/10/31 12:33:59 fetching corpus: 8700, signal 258186/275050 (executing program)
2022/10/31 12:33:59 fetching corpus: 8750, signal 258549/275050 (executing program)
2022/10/31 12:33:59 fetching corpus: 8800, signal 259082/275050 (executing program)
2022/10/31 12:33:59 fetching corpus: 8850, signal 259400/275050 (executing program)
2022/10/31 12:33:59 fetching corpus: 8900, signal 259695/275050 (executing program)
2022/10/31 12:33:59 fetching corpus: 8950, signal 260086/275051 (executing program)
2022/10/31 12:33:59 fetching corpus: 9000, signal 260369/275051 (executing program)
2022/10/31 12:33:59 fetching corpus: 9050, signal 260719/275051 (executing program)
2022/10/31 12:33:59 fetching corpus: 9100, signal 261110/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9150, signal 261528/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9200, signal 261819/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9250, signal 262237/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9300, signal 262546/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9350, signal 262900/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9400, signal 263466/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9450, signal 263741/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9500, signal 264047/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9550, signal 264466/275052 (executing program)
2022/10/31 12:34:00 fetching corpus: 9600, signal 264761/275052 (executing program)
2022/10/31 12:34:01 fetching corpus: 9650, signal 265074/275052 (executing program)
2022/10/31 12:34:01 fetching corpus: 9700, signal 265597/275052 (executing program)
2022/10/31 12:34:01 fetching corpus: 9750, signal 266013/275052 (executing program)
2022/10/31 12:34:01 fetching corpus: 9800, signal 266355/275052 (executing program)
2022/10/31 12:34:01 fetching corpus: 9850, signal 266881/275197 (executing program)
2022/10/31 12:34:01 fetching corpus: 9900, signal 267216/275197 (executing program)
2022/10/31 12:34:01 fetching corpus: 9950, signal 267517/275199 (executing program)
2022/10/31 12:34:01 fetching corpus: 10000, signal 267910/275199 (executing program)
2022/10/31 12:34:01 fetching corpus: 10050, signal 268225/275199 (executing program)
2022/10/31 12:34:02 fetching corpus: 10100, signal 268666/275199 (executing program)
2022/10/31 12:34:02 fetching corpus: 10150, signal 268922/275199 (executing program)
2022/10/31 12:34:02 fetching corpus: 10200, signal 269555/275244 (executing program)
2022/10/31 12:34:02 fetching corpus: 10250, signal 269808/275244 (executing program)
2022/10/31 12:34:02 fetching corpus: 10300, signal 270081/275244 (executing program)
2022/10/31 12:34:02 fetching corpus: 10304, signal 270088/275244 (executing program)
2022/10/31 12:34:02 fetching corpus: 10304, signal 270088/275244 (executing program)
2022/10/31 12:34:04 starting 8 fuzzer processes
12:34:04 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0)
mount$9p_unix(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1005002, 0x0)
pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00')

12:34:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={0x100006, 0x0, 0x0, {r0}}, 0x20)

12:34:04 executing program 2:
io_setup(0x7f, &(0x7f00000013c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540), 0x8})

12:34:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0)
pwritev(r0, &(0x7f0000001440)=[{&(0x7f0000000200)='T', 0x1}], 0x1, 0xffff, 0x0)
copy_file_range(r0, &(0x7f0000000000), r0, &(0x7f0000000040)=0x6, 0x3, 0x0)

12:34:04 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000000), 0x4)

[   79.839754] audit: type=1400 audit(1667219644.946:6): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:34:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002a40), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12:34:04 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x128, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)

12:34:04 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r2 = gettid()
getpriority(0x0, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x63151cbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0xfff, 0x7}, 0x410, 0x100000000, 0x0, 0x4, 0x7, 0x3f, 0x401, 0x0, 0x80000000, 0x0, 0x49}, r2, 0x6, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[   81.115865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.123792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.129858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.140329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.149432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.151950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.186477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.186790] Bluetooth: hci0: HCI_REQ-0x0c1a
[   81.189526] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.190544] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.191990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.192147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.194000] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.194714] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.196204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.196713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.197347] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   81.198377] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.203780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.204656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.205608] Bluetooth: hci4: HCI_REQ-0x0c1a
[   81.214338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.224292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.226397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.228847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.230317] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   81.231704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.234269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   81.235932] Bluetooth: hci1: HCI_REQ-0x0c1a
[   81.240558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.243386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.244690] Bluetooth: hci2: HCI_REQ-0x0c1a
[   81.253928] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.262735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.275204] Bluetooth: hci3: HCI_REQ-0x0c1a
[   81.314625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   81.321275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   81.323952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   81.327526] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   81.330605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   81.333103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   81.334921] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.337172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   81.338811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   81.345093] Bluetooth: hci5: HCI_REQ-0x0c1a
[   81.366664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   81.367542] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   81.368301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   81.375466] Bluetooth: hci7: HCI_REQ-0x0c1a
[   83.199594] Bluetooth: hci0: command 0x0409 tx timeout
[   83.263491] Bluetooth: hci2: command 0x0409 tx timeout
[   83.264173] Bluetooth: hci1: command 0x0409 tx timeout
[   83.264629] Bluetooth: hci4: command 0x0409 tx timeout
[   83.265211] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   83.327193] Bluetooth: hci3: command 0x0409 tx timeout
[   83.391167] Bluetooth: hci7: command 0x0409 tx timeout
[   83.391790] Bluetooth: hci5: command 0x0409 tx timeout
[   85.247916] Bluetooth: hci0: command 0x041b tx timeout
[   85.311139] Bluetooth: hci4: command 0x041b tx timeout
[   85.311749] Bluetooth: hci1: command 0x041b tx timeout
[   85.312372] Bluetooth: hci2: command 0x041b tx timeout
[   85.375110] Bluetooth: hci3: command 0x041b tx timeout
[   85.439201] Bluetooth: hci5: command 0x041b tx timeout
[   85.439726] Bluetooth: hci7: command 0x041b tx timeout
[   87.295078] Bluetooth: hci0: command 0x040f tx timeout
[   87.359147] Bluetooth: hci2: command 0x040f tx timeout
[   87.359566] Bluetooth: hci1: command 0x040f tx timeout
[   87.359925] Bluetooth: hci4: command 0x040f tx timeout
[   87.423083] Bluetooth: hci3: command 0x040f tx timeout
[   87.487147] Bluetooth: hci7: command 0x040f tx timeout
[   87.487569] Bluetooth: hci5: command 0x040f tx timeout
[   89.023076] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   89.343060] Bluetooth: hci0: command 0x0419 tx timeout
[   89.407112] Bluetooth: hci4: command 0x0419 tx timeout
[   89.407556] Bluetooth: hci1: command 0x0419 tx timeout
[   89.407901] Bluetooth: hci2: command 0x0419 tx timeout
[   89.471128] Bluetooth: hci3: command 0x0419 tx timeout
[   89.535247] Bluetooth: hci5: command 0x0419 tx timeout
[   89.535814] Bluetooth: hci7: command 0x0419 tx timeout
[   91.664354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   91.667653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   91.670177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   91.677153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   91.683172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   91.689211] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   91.696172] Bluetooth: hci6: HCI_REQ-0x0c1a
[   93.759108] Bluetooth: hci6: command 0x0409 tx timeout
[   95.807093] Bluetooth: hci6: command 0x041b tx timeout
[   97.855106] Bluetooth: hci6: command 0x040f tx timeout
[   99.903117] Bluetooth: hci6: command 0x0419 tx timeout
[  137.321238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.321800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.323476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.495197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.495766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.497192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.737463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.738273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.739595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.900569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.901350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.902521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.970370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.971102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.979414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.155419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.156161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.157706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.190955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.191553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.192784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.204986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.205658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.206914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:35:03 executing program 4:
r0 = gettid()
setpgid(r0, 0x0)

12:35:03 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  138.356145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.356721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.363719] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.444502] audit: type=1400 audit(1667219703.551:7): avc:  denied  { open } for  pid=3811 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.447652] audit: type=1400 audit(1667219703.551:8): avc:  denied  { kernel } for  pid=3811 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  138.564603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.565150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.567333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.570024] hrtimer: interrupt took 18916 ns
[  138.705321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.706520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.709057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.916072] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  138.916707] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  138.917344] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  138.917919] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  138.918453] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 2
[  138.970356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.971368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.973678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.050150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.050874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.052639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.290313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.291226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.292652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.296755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.297530] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.298461] Buffer I/O error on dev sr0, logical block 0, async page read
[  139.301248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.301809] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.302734] Buffer I/O error on dev sr0, logical block 1, async page read
[  139.303651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.304465] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.305335] Buffer I/O error on dev sr0, logical block 2, async page read
[  139.309202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.309773] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.310674] Buffer I/O error on dev sr0, logical block 3, async page read
[  139.311579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.312303] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.313177] Buffer I/O error on dev sr0, logical block 4, async page read
[  139.316210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.316806] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.317688] Buffer I/O error on dev sr0, logical block 5, async page read
[  139.318583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.319237] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.320098] Buffer I/O error on dev sr0, logical block 6, async page read
[  139.321818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.322849] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.323709] Buffer I/O error on dev sr0, logical block 7, async page read
[  139.326352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.326920] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.327871] Buffer I/O error on dev sr0, logical block 0, async page read
[  139.328798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.329634] Buffer I/O error on dev sr0, logical block 1, async page read
[  139.330553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.331295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.332069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.332776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.333547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.336200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  139.430857] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  139.431487] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  139.431902] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  139.432349] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
12:35:04 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  140.177890] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  140.179145] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  140.180252] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  140.181180] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  140.213660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.224634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.225689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.272575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.277630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.278578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.280185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.284630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.309464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.310625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.311623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.312668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.316189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.317359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.318479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.321998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.323940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.324916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.326186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.327164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.330151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.331364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.332459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.344926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.358538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.359882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.360864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.390093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.392196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.395345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.396809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.397744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.399182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.401784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.402981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.403875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.404859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.405747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.406665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.412528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.418649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.419840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.420827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.421799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.422846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.423795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.424759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.425907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.439215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.441761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.442756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.443694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.444756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.449133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.455609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.459831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.461290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.466605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.467783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.468807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.469729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.470654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.471959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.472867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.475196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.477620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.478544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.479789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.480787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.481803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.482710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.483682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.484995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.485965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.487984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.488985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.490144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.492425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.493637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.494563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.497966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.498973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.500176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.501487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.502516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.503949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.504827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.505768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.507968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.508924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.509845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.514643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.515600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.516645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.517569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.518523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.519764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.520733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.521683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.522538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.524290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.525280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.526249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.527152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.528370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.530265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.531141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.532119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.533046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.534031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.535927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.536878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.538088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.538974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.540777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.541659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.542533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.543483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.544861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.546717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.547922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.548817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.550748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.551684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.553792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.555406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.559586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.561902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.563521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.564590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.565751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.566697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.568062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.569489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.570540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.573196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.575223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.576830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.577859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.578759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.579690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.580724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.581619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.583196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.584452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.586060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.587066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.588052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.589538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.591773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.601650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.608486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.609758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.610812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.611779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.612739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.613677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.619983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.639253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.640452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.642496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.643590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.645230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.656544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.657753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.658736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.659758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.660871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.662066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.662983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.663935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.664883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.665869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.666856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.667760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.668636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.669888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.670908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.671835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.672892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.673923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.674910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.675943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.677048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.678412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.680326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.691394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.693587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.694568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.695783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.696775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.697831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.699860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.700796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.701724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.702739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.703664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.704595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.706160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.708244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.709588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.710542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.711411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.712231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.713734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.714659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.715642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.716563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.718715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.719643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.720530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.722072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.722943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.723841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.724853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.725755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.727058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.727911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.728807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.729657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.730537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.731498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.733919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.740274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.741604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.744942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.745645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.746364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.747567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.759245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.759967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.760806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  143.838811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.845421] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.850693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.852606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  143.855289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  143.856938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  143.860549] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  143.862507] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  143.866316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  143.871917] Bluetooth: hci3: HCI_REQ-0x0c1a
[  143.898429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.901849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  143.906782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  143.908281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.909832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  143.912305] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  143.916572] Bluetooth: hci2: HCI_REQ-0x0c1a
[  143.950329] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  143.951727] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  143.952968] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  143.963593] Bluetooth: hci4: HCI_REQ-0x0c1a
[  145.279072] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  145.639307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.639914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.641543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.690596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.691444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.693170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.791054] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  145.920079] Bluetooth: hci3: command 0x0409 tx timeout
[  145.983124] Bluetooth: hci4: command 0x0409 tx timeout
[  145.983716] Bluetooth: hci2: command 0x0409 tx timeout
[  147.814818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  147.816282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  147.817943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  147.821474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  147.823910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  147.825608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  147.834279] Bluetooth: hci0: HCI_REQ-0x0c1a
[  147.968068] Bluetooth: hci3: command 0x041b tx timeout
[  148.032212] Bluetooth: hci2: command 0x041b tx timeout
[  148.032268] Bluetooth: hci4: command 0x041b tx timeout
[  149.887188] Bluetooth: hci0: command 0x0409 tx timeout
[  150.015061] Bluetooth: hci3: command 0x040f tx timeout
[  150.079341] Bluetooth: hci4: command 0x040f tx timeout
[  150.079672] Bluetooth: hci2: command 0x040f tx timeout
[  150.463148] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  151.935070] Bluetooth: hci0: command 0x041b tx timeout
[  152.064059] Bluetooth: hci3: command 0x0419 tx timeout
[  152.127762] Bluetooth: hci4: command 0x0419 tx timeout
[  152.127876] Bluetooth: hci2: command 0x0419 tx timeout
[  153.029800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.030720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.032815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.034929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.035874] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  153.037715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.041299] Bluetooth: hci1: HCI_REQ-0x0c1a
[  153.984080] Bluetooth: hci0: command 0x040f tx timeout
[  155.071220] Bluetooth: hci1: command 0x0409 tx timeout
[  156.031168] Bluetooth: hci0: command 0x0419 tx timeout
[  157.119145] Bluetooth: hci1: command 0x041b tx timeout
[  159.167106] Bluetooth: hci1: command 0x040f tx timeout
[  161.216726] Bluetooth: hci1: command 0x0419 tx timeout
[  175.764195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.764246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.764871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.765511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.767093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  175.768114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  175.850624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.851262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.852946] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  175.924562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.925199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.926893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.985237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.985820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.987252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  176.064297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  176.064895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.066866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.784757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.785889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.788540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  178.843669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.844332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.846297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  181.452488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.453140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.454670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.469501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.470102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.471457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:35:47 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0)
mount$9p_unix(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1005002, 0x0)
pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00')

12:35:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002a40), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12:35:47 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r2 = gettid()
getpriority(0x0, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x63151cbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0xfff, 0x7}, 0x410, 0x100000000, 0x0, 0x4, 0x7, 0x3f, 0x401, 0x0, 0x80000000, 0x0, 0x49}, r2, 0x6, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

12:35:47 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x128, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)

12:35:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:35:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:35:47 executing program 2:
io_setup(0x7f, &(0x7f00000013c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540), 0x8})

12:35:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:35:47 executing program 2:
io_setup(0x7f, &(0x7f00000013c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540), 0x8})

12:35:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002a40), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12:35:47 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  182.471346] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  182.472592] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  182.473531] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  182.474385] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  182.475351] blk_print_req_error: 241 callbacks suppressed
[  182.475367] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2
[  182.478306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.479335] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.480455] buffer_io_error: 246 callbacks suppressed
[  182.480471] Buffer I/O error on dev sr0, logical block 0, async page read
[  182.482333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.483145] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.484291] Buffer I/O error on dev sr0, logical block 1, async page read
[  182.485478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.486319] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.487548] Buffer I/O error on dev sr0, logical block 2, async page read
[  182.488713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.489538] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.490731] Buffer I/O error on dev sr0, logical block 3, async page read
[  182.493734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.494562] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.495727] Buffer I/O error on dev sr0, logical block 4, async page read
[  182.499305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.500158] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.501273] Buffer I/O error on dev sr0, logical block 5, async page read
[  182.502410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.503207] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.504393] Buffer I/O error on dev sr0, logical block 6, async page read
[  182.505562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.506324] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.507524] Buffer I/O error on dev sr0, logical block 7, async page read
[  182.508769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.509599] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  182.510754] Buffer I/O error on dev sr0, logical block 0, async page read
[  182.511892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.512690] Buffer I/O error on dev sr0, logical block 1, async page read
[  182.513882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.514857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.515840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.516810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.517888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.518930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.520233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.521317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.522292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.523332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.524290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.525323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.526304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.527312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.530126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.531247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.532184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.533187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.538313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.539395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.540334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.561305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.567334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.568250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.569260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.571265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.572275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.573287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.574236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.577295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.578345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.579292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.582259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:35:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:35:47 executing program 2:
io_setup(0x7f, &(0x7f00000013c0)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001580)={&(0x7f0000001540), 0x8})

[  182.585285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.586237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.589264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.590254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.591250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.592399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.595291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.596295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.597305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.599266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.600251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.606718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.608251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.609259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.614287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.615602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.617536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.640527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.642120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.643247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.644254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.645381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.646537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.647697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.648784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.649917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.650930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.651969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.653118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.654218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.655314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.658609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.659691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.660706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.661731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.662732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.663745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.664827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.665854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.666802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.667739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.668659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.669612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.670549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.671483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.672442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.673388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.674359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.675330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.676279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.677256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.678230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.679213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.680232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.681241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.682223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.683190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.684228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.685223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.686253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.687257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.688323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.689401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.690391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.691425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.692433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.693462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.694460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.695476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.696985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.698113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.699085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.700103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.701112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.702074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.703003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.704212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.705260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.706310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.707286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.708336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.709311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.710295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.711288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.712344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.713387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.714380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.715371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.716357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.717339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.718321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.719310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.720327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.721357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.722360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.723329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.724432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.725448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.726433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.727415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.728437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.729471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:35:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000002a40), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  182.782431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.790458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.791504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.792425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.795335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.796451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.797445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.798459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.804309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.805858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.808059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.808985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.809943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.810871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.811829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.812854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.815353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.816352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.819286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.820305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.821380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.823956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.824954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.826197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.827224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.828202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.829276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.832281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.833412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  182.834408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:35:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x128, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)

[  183.012549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:35:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  183.051962] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  183.053477] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  183.054507] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  183.055567] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[  183.097891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.099195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.100161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.101088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.101964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.102902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.103847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.104854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.975665] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  183.977247] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  183.977965] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  183.978700] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  183.980951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.981856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.983187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.984241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.985235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.986167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.987042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.987878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.988830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.989711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.990584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.991455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.992391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.993341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.994247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.995162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.996156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.997121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.998089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.998989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  183.999926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.000851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.001790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.002701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.003642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.004565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.005484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.006412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.007394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.008368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.009346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.010283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.011255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.012193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.013129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.014058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.014951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.015931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.016878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.017826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.018805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.019743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.020701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.021709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.022665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.023617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.024573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.025561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.026555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.027508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.028483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.029590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.030500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.031461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.032366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.033329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.034307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.035231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.036131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.037144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.038083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.038972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.039877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.040812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.041833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.042765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.043662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.044602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.045601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.046504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.091394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.092229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.092814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.093473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.094288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.094847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.095464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  184.096096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  185.239521] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  185.243949] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  185.246793] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  185.250773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  185.252517] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  185.254185] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  185.258923] Bluetooth: hci7: HCI_REQ-0x0c1a
[  187.263242] Bluetooth: hci7: command 0x0409 tx timeout
[  189.311136] Bluetooth: hci7: command 0x041b tx timeout
[  191.359207] Bluetooth: hci7: command 0x040f tx timeout
[  193.407291] Bluetooth: hci7: command 0x0419 tx timeout
[  204.159882] Bluetooth: hci5: command 0x0406 tx timeout
[  205.365579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.366521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.368411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  205.408827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.409998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.412658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:36:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:10 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:10 executing program 6:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
stat(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x128, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0)

12:36:10 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r2 = gettid()
getpriority(0x0, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x63151cbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0xfff, 0x7}, 0x410, 0x100000000, 0x0, 0x4, 0x7, 0x3f, 0x401, 0x0, 0x80000000, 0x0, 0x49}, r2, 0x6, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

12:36:10 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:10 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:10 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0)
mount$9p_unix(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1005002, 0x0)
pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00')

12:36:11 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0)
mount$9p_unix(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1005002, 0x0)
pivot_root(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file1\x00')

[  206.071242] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  206.072548] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  206.073541] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  206.074466] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  206.075484] blk_print_req_error: 255 callbacks suppressed
[  206.075500] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2
[  206.133777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.134876] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.136055] buffer_io_error: 262 callbacks suppressed
[  206.136075] Buffer I/O error on dev sr0, logical block 0, async page read
[  206.137929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.138747] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2
[  206.139892] Buffer I/O error on dev sr0, logical block 1, async page read
[  206.140891] Buffer I/O error on dev sr0, logical block 2, async page read
[  206.141885] Buffer I/O error on dev sr0, logical block 3, async page read
[  206.142856] Buffer I/O error on dev sr0, logical block 4, async page read
[  206.143816] Buffer I/O error on dev sr0, logical block 5, async page read
[  206.144770] Buffer I/O error on dev sr0, logical block 6, async page read
[  206.145801] Buffer I/O error on dev sr0, logical block 7, async page read
[  206.224604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.225461] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.226622] Buffer I/O error on dev sr0, logical block 0, async page read
[  206.228260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.229073] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.230250] Buffer I/O error on dev sr0, logical block 1, async page read
[  206.231438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.232250] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.233606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.234395] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.235769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.236568] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.238076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.238828] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.240258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.241053] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.242407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.243479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.244495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.245503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.246517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.247541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.248579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.249722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.250715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.251784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.252851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.253875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.254933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.255932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.256957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.260248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.261250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.262337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.263406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.264404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.265422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.266447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.267487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.268458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.269509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.270599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.271666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.272659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.273652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.274642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.275669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.276632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.278528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.279709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.280828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.281902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.284399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.289409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.290492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.291486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.292431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.293328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.294295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.296402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.297406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.298290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.299147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.300037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.300858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.308601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.311847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.487881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.492540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.496476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.497784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.498975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.499905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.500805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.501725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.502666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.504982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.506340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.507568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.508867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.509878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.510821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.511702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.512835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.516715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.584478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.587207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.587745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.588306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.588773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.589306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.589854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.590361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.590866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.611874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.624782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.627158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.628441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.672695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.673226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.673729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  206.674233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:36:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  207.480970] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  207.482484] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  207.483570] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  207.484600] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  207.493541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.495169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.496558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.498711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.499676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.501099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.502481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.504418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.507224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.508344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.509678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.510662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.511925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.513135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.514877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.515862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.517639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.518886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.521789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.531697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.595621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.653583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.654415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.655159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.656130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.656798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.657493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.658231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.658864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.659555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.660284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.660915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.661723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.662420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.663198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.663831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.664533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.664983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.665470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  207.665930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
12:36:12 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:12 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:12 executing program 6:
r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000fe9000/0x2000)=nil)
shmat(r0, &(0x7f0000ff0000/0x2000)=nil, 0x5000)

12:36:12 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_origin(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r2 = gettid()
getpriority(0x0, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x7f, 0x0, 0x1, 0x0, 0x63151cbe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0xfff, 0x7}, 0x410, 0x100000000, 0x0, 0x4, 0x7, 0x3f, 0x401, 0x0, 0x80000000, 0x0, 0x49}, r2, 0x6, r1, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

12:36:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysfs$3(0x3)

12:36:12 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:12 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000940)='gid_map\x00')
sync_file_range(r0, 0x0, 0x0, 0x3)

12:36:12 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x48, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4b00, 0x0, 0xffff2f22, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001e00)={0x1c0306000, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000001bc0)=""/207, 0xcf, &(0x7f0000001e80)=""/269, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)
r0 = fork()
process_vm_readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/221, 0xdd}], 0x3, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
clone3(&(0x7f0000000340)={0x3021000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x8}, &(0x7f0000000180)=""/140, 0x8c, &(0x7f0000000240)=""/156, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)

12:36:12 executing program 6:
r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000fe9000/0x2000)=nil)
shmat(r0, &(0x7f0000ff0000/0x2000)=nil, 0x5000)

12:36:12 executing program 1:
iopl(0x3)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)

12:36:13 executing program 6:
r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000fe9000/0x2000)=nil)
shmat(r0, &(0x7f0000ff0000/0x2000)=nil, 0x5000)

12:36:13 executing program 1:
iopl(0x3)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)

12:36:13 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

12:36:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r0 = syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x0, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000300))
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), 0x0)
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0x49e8, &(0x7f0000000940)={0x0, 0x0, 0x8, 0x3, 0x316, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r0, 0xfffffffffffffff7)
close(r2)

[  208.328124] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.328835] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  208.329345] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  208.329835] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  208.359435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.365904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.367049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.372322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.375530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.382497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.387659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.391506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.392752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.393801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.394885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.396235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.397695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.398784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.399811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.402708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.408173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.409701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.412399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.414619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.416508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.417996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.419292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.420899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.423610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.424757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.426277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.427333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.429107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.430554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.432413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.434242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.444824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.446075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.447094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.448146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.449166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.450285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.451377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.452479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.453859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.457381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.460802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.461880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.464857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.467353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.472523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.473881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.474966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.476606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.478060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.479212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.481913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.484528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.488557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.489658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.493164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.496917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.502394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.504606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.505753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.507749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.509430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.515906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.516952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.518880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.520395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.521764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.522826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.525380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.526931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.532337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.533925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.534994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.562224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.563596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.564640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.566168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.570298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.572397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.574967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.577598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.582721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.583791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.584858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.585802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.586929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.588711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.592509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.593783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.594789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.595813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.596862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.597843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.599160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.601820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.603527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.606972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.610574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.612188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.615978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.619821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.620808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.622687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.624188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.635682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.636624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.700043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.701820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.702781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.704824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.707525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.708666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.709644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.710648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.711536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.712612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.713622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.714648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.715565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.717048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.718057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.719804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.720751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.722764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.723757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.724895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.725933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.728676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.730119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.732654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.733723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.734758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.736726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.737709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.739685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.740763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.741859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.745952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.746907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.748627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.750689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.751728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.753491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.754928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.755897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.756917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.757850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.758803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.759853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.760842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.761861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.763464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.766177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.775266] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.778532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.780407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.783610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.784658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.785654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.786915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.788478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.789619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.790578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.794617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.795631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.797209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.798364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.802348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.803712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.804704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.805737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.806684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.807883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.808924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.809942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.811543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.812640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.813651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.814675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.815617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.816694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.817629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.818925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.820137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.821990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.822955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.823954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.824978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.826063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.826944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.827983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.829050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.830049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.831049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.831975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.832881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.833901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.834832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.835817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.837072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.838284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.840138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.841814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.842743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.843748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.868627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.869661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.870732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.871703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.872776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.873800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.874779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.875829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.876891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.878307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.880876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.886934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.887881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.888871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.889844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.890755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.891659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.892644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.893702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.894613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.895650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.896608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.897602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.899236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.900333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.901469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.902945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.904062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.906146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.907345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.908731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.909853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.910922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.911976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.913236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.914933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.916076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.917202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.918608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.919739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.920821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.921977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.923171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.925042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.926173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.927856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.928889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.930183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.931894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.932981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.940278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.940811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.941322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.941814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.942335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.942797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.943517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  208.943989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.040738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.041778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.042866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.043929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.044986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.046145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.047232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  209.048296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  212.415233] Bluetooth: hci7: Opcode 0x c03 failed: -110
[  214.736787] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  214.739779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  214.742976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  214.747084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  214.749623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  214.752145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.759770] Bluetooth: hci7: HCI_REQ-0x0c1a
[  216.447171] Bluetooth: hci6: command 0x0406 tx timeout
[  216.831128] Bluetooth: hci7: command 0x0409 tx timeout
[  218.879116] Bluetooth: hci7: command 0x041b tx timeout
[  220.927140] Bluetooth: hci7: command 0x040f tx timeout
[  222.975118] Bluetooth: hci7: command 0x0419 tx timeout
[  235.730686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.731681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.734543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  235.762775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.763654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.765664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:36:41 executing program 1:
iopl(0x3)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)

12:36:41 executing program 6:
r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
mremap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000fe9000/0x2000)=nil)
shmat(r0, &(0x7f0000ff0000/0x2000)=nil, 0x5000)

12:36:41 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x48, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4b00, 0x0, 0xffff2f22, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001e00)={0x1c0306000, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000001bc0)=""/207, 0xcf, &(0x7f0000001e80)=""/269, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)
r0 = fork()
process_vm_readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/221, 0xdd}], 0x3, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
clone3(&(0x7f0000000340)={0x3021000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x8}, &(0x7f0000000180)=""/140, 0x8c, &(0x7f0000000240)=""/156, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)

12:36:41 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)="86aec224", 0x4}], 0x1, 0x0, 0x0)

12:36:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x7, 0x7, 0x3}, &(0x7f00000004c0)={0x40, 0x0, 0x0, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8})

12:36:41 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

12:36:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000300))

12:36:41 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:41 executing program 1:
iopl(0x3)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)

[  236.278652] audit: type=1326 audit(1667219801.385:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7265 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2dbd83b19 code=0x0
12:36:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000300))

12:36:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x7, 0x7, 0x3}, &(0x7f00000004c0)={0x40, 0x0, 0x0, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8})

12:36:41 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)="86aec224", 0x4}], 0x1, 0x0, 0x0)

[  236.488305] BUG: unable to handle page fault for address: ffffed100fffc000
[  236.488795] #PF: supervisor write access in kernel mode
[  236.489149] #PF: error_code(0x0002) - not-present page
[  236.489492] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  236.489991] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI
[  236.490321] CPU: 0 PID: 7285 Comm: syz-executor.2 Not tainted 6.1.0-rc3-next-20221031 #1
[  236.490840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  236.493571] RIP: 0010:__memset+0x24/0x50
[  236.493875] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  236.495076] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  236.495434] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  236.495913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  236.496387] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  236.496861] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  236.497330] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  236.497802] FS:  00007f52fca5a700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  236.498332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.498716] CR2: ffffed100fffc000 CR3: 0000000038d86000 CR4: 0000000000350ef0
[  236.499184] Call Trace:
[  236.499359]  <TASK>
[  236.499513]  kasan_unpoison+0x23/0x60
12:36:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000300))

12:36:41 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x0)

12:36:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x7, 0x7, 0x3}, &(0x7f00000004c0)={0x40, 0x0, 0x0, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8})

12:36:41 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, &(0x7f0000000300))

[  236.499781]  mempool_exit+0x1c2/0x330
[  236.499804]  bioset_exit+0x2c9/0x630
[  236.499822]  ? _raw_spin_unlock_irq+0x1f/0x60
[  236.499848]  disk_release+0x143/0x490
[  236.499865]  ? disk_release+0x0/0x490
[  236.499882]  ? device_release+0x0/0x250
[  236.499897]  device_release+0xa2/0x250
[  236.499912]  ? device_release+0x0/0x250
[  236.499926]  kobject_put+0x173/0x280
[  236.499943]  put_device+0x1b/0x40
[  236.499957]  put_disk+0x41/0x60
12:36:41 executing program 6:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

[  236.499972]  loop_control_ioctl+0x4d1/0x630
[  236.499993]  ? loop_control_ioctl+0x0/0x630
[  236.500011]  ? selinux_file_ioctl+0xb1/0x270
[  236.500036]  ? loop_control_ioctl+0x0/0x630
[  236.500055]  __x64_sys_ioctl+0x19a/0x220
[  236.500077]  do_syscall_64+0x3b/0xa0
[  236.500098]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  236.500115] RIP: 0033:0x7f52ff505b19
[  236.500125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  236.500138] RSP: 002b:00007f52fca5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  236.500151] RAX: ffffffffffffffda RBX: 00007f52ff619020 RCX: 00007f52ff505b19
[  236.500160] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005
[  236.500169] RBP: 00007f52ff55ff6d R08: 0000000000000000 R09: 0000000000000000
[  236.500177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.500186] R13: 00007fff4a5ca60f R14: 00007f52fca5a300 R15: 0000000000022000
[  236.500201]  </TASK>
[  236.500205] Modules linked in:
[  236.500212] CR2: ffffed100fffc000
[  236.500218] ---[ end trace 0000000000000000 ]---
[  236.500224] RIP: 0010:__memset+0x24/0x50
[  236.500248] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  236.500260] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  236.500271] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  236.500280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  236.500288] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  236.500297] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  236.500306] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  236.500316] FS:  00007f52fca5a700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  236.500329] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  236.500339] CR2: ffffed100fffc000 CR3: 0000000038d86000 CR4: 0000000000350ef0
[  237.150384] BUG: unable to handle page fault for address: ffffed100fffc000
[  237.151279] #PF: supervisor write access in kernel mode
[  237.151913] #PF: error_code(0x0002) - not-present page
[  237.152537] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  237.153390] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI
[  237.154008] CPU: 1 PID: 7304 Comm: syz-executor.2 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  237.155151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  237.156138] RIP: 0010:__memset+0x24/0x50
[  237.156669] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  237.158848] RSP: 0018:ffff888040a27cc0 EFLAGS: 00010216
[  237.159507] RAX: 0000000000000000 RBX: ffff88800c002240 RCX: 1ffffe21fe600fb1
[  237.160386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  237.161270] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800448
[  237.162158] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  237.163041] R13: ffff88800c002240 R14: ffffffff815f27a0 R15: 1ffff11001123c1f
[  237.163907] FS:  00007f52fca39700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  237.164889] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.165617] CR2: ffffed100fffc000 CR3: 0000000038d86000 CR4: 0000000000350ee0
[  237.166512] Call Trace:
[  237.166844]  <TASK>
[  237.167140]  kasan_unpoison+0x23/0x60
[  237.167640]  mempool_exit+0x1c2/0x330
[  237.168141]  bioset_exit+0x2c9/0x630
[  237.168634]  ? _raw_spin_unlock_irq+0x1f/0x60
[  237.169231]  disk_release+0x143/0x490
[  237.169733]  ? disk_release+0x0/0x490
[  237.170252]  ? device_release+0x0/0x250
[  237.170771]  device_release+0xa2/0x250
[  237.171273]  ? device_release+0x0/0x250
[  237.171787]  kobject_put+0x173/0x280
[  237.172275]  put_device+0x1b/0x40
[  237.172731]  put_disk+0x41/0x60
[  237.173168]  loop_control_ioctl+0x4d1/0x630
[  237.173731]  ? loop_control_ioctl+0x0/0x630
[  237.174303]  ? selinux_file_ioctl+0xb1/0x270
[  237.174887]  ? loop_control_ioctl+0x0/0x630
[  237.175422]  __x64_sys_ioctl+0x19a/0x220
[  237.175955]  do_syscall_64+0x3b/0xa0
[  237.176456]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  237.177091] RIP: 0033:0x7f52ff505b19
[  237.177560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  237.179781] RSP: 002b:00007f52fca39188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.180702] RAX: ffffffffffffffda RBX: 00007f52ff6190e0 RCX: 00007f52ff505b19
[  237.181595] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000004
[  237.182473] RBP: 00007f52ff55ff6d R08: 0000000000000000 R09: 0000000000000000
[  237.183364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.184250] R13: 00007fff4a5ca60f R14: 00007f52fca39300 R15: 0000000000022000
[  237.185137]  </TASK>
[  237.185430] Modules linked in:
[  237.185852] CR2: ffffed100fffc000
[  237.186296] ---[ end trace 0000000000000000 ]---
[  237.186870] RIP: 0010:__memset+0x24/0x50
[  237.187404] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  237.189578] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  237.190265] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  237.191127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  237.192016] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  237.192901] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  237.193796] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  237.194681] FS:  00007f52fca39700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  237.195681] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.196402] CR2: ffffed100fffc000 CR3: 0000000038d86000 CR4: 0000000000350ee0
12:36:42 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:42 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x48, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4b00, 0x0, 0xffff2f22, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001e00)={0x1c0306000, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000001bc0)=""/207, 0xcf, &(0x7f0000001e80)=""/269, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)
r0 = fork()
process_vm_readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/221, 0xdd}], 0x3, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
clone3(&(0x7f0000000340)={0x3021000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x8}, &(0x7f0000000180)=""/140, 0x8c, &(0x7f0000000240)=""/156, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)

12:36:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r1, r0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)

12:36:42 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:42 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:42 executing program 6:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:42 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x7, 0x7, 0x3}, &(0x7f00000004c0)={0x40, 0x0, 0x0, 0x80000001, 0x0, 0x8, 0xeb7, 0x40}, &(0x7f0000000500)={0x7}, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8})

12:36:42 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)="86aec224", 0x4}], 0x1, 0x0, 0x0)

12:36:42 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:42 executing program 5:
r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)="86aec224", 0x4}], 0x1, 0x0, 0x0)

12:36:42 executing program 6:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:42 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:42 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:42 executing program 6:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:42 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:42 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:43 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x48, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4b00, 0x0, 0xffff2f22, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001e00)={0x1c0306000, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000001bc0)=""/207, 0xcf, &(0x7f0000001e80)=""/269, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)
r0 = fork()
process_vm_readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/105, 0x69}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/221, 0xdd}], 0x3, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
clone3(&(0x7f0000000340)={0x3021000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x8}, &(0x7f0000000180)=""/140, 0x8c, &(0x7f0000000240)=""/156, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)

12:36:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:43 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:43 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:43 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:43 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:43 executing program 4:
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
readlink(&(0x7f0000000680)='./file1\x00', &(0x7f0000000100)=""/251, 0xfb)
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/209, 0xd1)

12:36:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:43 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

[  239.130123] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.131050] #PF: supervisor write access in kernel mode
[  239.131717] #PF: error_code(0x0002) - not-present page
[  239.132371] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  239.133224] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI
[  239.133868] CPU: 1 PID: 7363 Comm: syz-executor.6 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.135053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.136067] RIP: 0010:__memset+0x24/0x50
[  239.136619] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.138850] RSP: 0018:ffff888031f47cc0 EFLAGS: 00010216
[  239.139570] RAX: 0000000000000000 RBX: ffff88800c0023c0 RCX: 1ffffe21fe600fb7
[  239.140525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.141482] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800478
[  239.142453] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.143412] R13: ffff88800c0023c0 R14: ffffffff815f27a0 R15: 1ffff1100112381f
[  239.144369] FS:  00007fb51e001700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.145460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.146248] CR2: ffffed100fffc000 CR3: 000000003cfd0000 CR4: 0000000000350ee0
[  239.147211] Call Trace:
[  239.147578]  <TASK>
[  239.147890]  kasan_unpoison+0x23/0x60
[  239.148389]  mempool_exit+0x1c2/0x330
[  239.148898]  bioset_exit+0x2c9/0x630
[  239.149393]  ? _raw_spin_unlock_irq+0x1f/0x60
[  239.150005]  disk_release+0x143/0x490
[  239.150501]  ? disk_release+0x0/0x490
[  239.150999]  ? device_release+0x0/0x250
[  239.151511]  device_release+0xa2/0x250
[  239.152012]  ? device_release+0x0/0x250
[  239.152516]  kobject_put+0x173/0x280
[  239.153001]  put_device+0x1b/0x40
[  239.153453]  put_disk+0x41/0x60
[  239.153901]  loop_control_ioctl+0x4d1/0x630
[  239.154467]  ? loop_control_ioctl+0x0/0x630
[  239.155031]  ? selinux_file_ioctl+0xb1/0x270
[  239.155617]  ? __sanitizer_cov_trace_pc+0x5c/0x80
[  239.156243]  ? loop_control_ioctl+0x0/0x630
[  239.156813]  __x64_sys_ioctl+0x19a/0x220
[  239.157353]  do_syscall_64+0x3b/0xa0
[  239.157857]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.158512] RIP: 0033:0x7fb520a8bb19
[  239.158988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.161194] RSP: 002b:00007fb51e001188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.162156] RAX: ffffffffffffffda RBX: 00007fb520b9ef60 RCX: 00007fb520a8bb19
[  239.163040] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.163928] RBP: 00007fb520ae5f6d R08: 0000000000000000 R09: 0000000000000000
[  239.164810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.165687] R13: 00007ffcdd6281df R14: 00007fb51e001300 R15: 0000000000022000
[  239.166597]  </TASK>
[  239.166918] Modules linked in:
[  239.167354] CR2: ffffed100fffc000
[  239.167797] ---[ end trace 0000000000000000 ]---
[  239.167801] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.168404] RIP: 0010:__memset+0x24/0x50
[  239.169291] #PF: supervisor write access in kernel mode
[  239.169809] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.170455] #PF: error_code(0x0002) - not-present page
[  239.172713] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.173360] PGD 7ffd3067 P4D 7ffd3067 
[  239.174054] 
[  239.174060] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.174531] PUD 7ffd2067 
[  239.174751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.175636] PMD 7ffd1067 
[  239.175987] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.176875] PTE 0
[  239.176889] Oops: 0002 [#4] PREEMPT SMP KASAN NOPTI
[  239.177369] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.178261] CPU: 0 PID: 7366 Comm: syz-executor.2 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.178645] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.179264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.180494] FS:  00007fb51e001700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.181669] RIP: 0010:__memset+0x24/0x50
[  239.182930] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.183949] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.185298] CR2: ffffed100fffc000 CR3: 000000003cfd0000 CR4: 0000000000350ee0
[  239.185803] RSP: 0018:ffff888031f77cc0 EFLAGS: 00010216
[  239.190776] RAX: 0000000000000000 RBX: ffff88800c002540 RCX: 1ffffe21fe600fbd
[  239.191729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.192643] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed10018004a8
[  239.193561] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.194482] R13: ffff88800c002540 R14: ffffffff815f27a0 R15: 1ffff1100112341f
[  239.195377] FS:  00007f52fca5a700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  239.196412] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.197154] CR2: ffffed100fffc000 CR3: 000000003429e000 CR4: 0000000000350ef0
[  239.198060] Call Trace:
[  239.198406]  <TASK>
[  239.198713]  kasan_unpoison+0x23/0x60
[  239.199229]  mempool_exit+0x1c2/0x330
[  239.199753]  bioset_exit+0x2c9/0x630
[  239.200259]  ? _raw_spin_unlock_irq+0x1f/0x60
[  239.200880]  disk_release+0x143/0x490
[  239.201402]  ? disk_release+0x0/0x490
[  239.201936]  ? device_release+0x0/0x250
[  239.202469]  device_release+0xa2/0x250
[  239.202990]  ? device_release+0x0/0x250
[  239.203533]  kobject_put+0x173/0x280
[  239.204047]  put_device+0x1b/0x40
[  239.204515]  put_disk+0x41/0x60
[  239.204970]  loop_control_ioctl+0x4d1/0x630
[  239.205554]  ? loop_control_ioctl+0x0/0x630
[  239.206141]  ? selinux_file_ioctl+0xb1/0x270
[  239.206745]  ? loop_control_ioctl+0x0/0x630
[  239.207371]  __x64_sys_ioctl+0x19a/0x220
[  239.207934]  do_syscall_64+0x3b/0xa0
[  239.208447]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.209134] RIP: 0033:0x7f52ff505b19
[  239.209633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.211964] RSP: 002b:00007f52fca5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.212947] RAX: ffffffffffffffda RBX: 00007f52ff619020 RCX: 00007f52ff505b19
[  239.213892] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.214813] RBP: 00007f52ff55ff6d R08: 0000000000000000 R09: 0000000000000000
[  239.215732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.216650] R13: 00007fff4a5ca60f R14: 00007f52fca5a300 R15: 0000000000022000
[  239.217581]  </TASK>
[  239.217897] Modules linked in:
[  239.218328] CR2: ffffed100fffc000
[  239.218788] ---[ end trace 0000000000000000 ]---
[  239.218791] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.219397] RIP: 0010:__memset+0x24/0x50
[  239.219965] #PF: supervisor write access in kernel mode
[  239.220476] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.220886] #PF: error_code(0x0002) - not-present page
[  239.223240] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.223669] PGD 7ffd3067 P4D 7ffd3067 
[  239.224354] 
[  239.224361] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.224631] PUD 7ffd2067 
[  239.224856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.225362] PMD 7ffd1067 PTE 0
[  239.225718] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.226214] 
[  239.226219] Oops: 0002 [#5] PREEMPT SMP KASAN NOPTI
[  239.226632] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.227112] CPU: 1 PID: 7370 Comm: syz-executor.6 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.227337] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.227664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.228575] FS:  00007f52fca5a700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  239.229239] RIP: 0010:__memset+0x24/0x50
[  239.230168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.230728] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.231747] CR2: ffffed100fffc000 CR3: 000000003429e000 CR4: 0000000000350ef0
[  239.232021] RSP: 0018:ffff888031fcfcc0 EFLAGS: 00010216
[  239.234937] RAX: 0000000000000000 RBX: ffff88800c0026c0 RCX: 1ffffe21fe600fc3
[  239.235454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.235931] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed10018004d8
[  239.236427] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.236904] R13: ffff88800c0026c0 R14: ffffffff815f27a0 R15: 1ffff1100112301f
[  239.237397] FS:  00007fb51dfe0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.238055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.238481] CR2: ffffed100fffc000 CR3: 000000003cfd0000 CR4: 0000000000350ee0
[  239.238976] Call Trace:
[  239.239157]  <TASK>
[  239.239321]  kasan_unpoison+0x23/0x60
[  239.239591]  mempool_exit+0x1c2/0x330
[  239.239856]  bioset_exit+0x2c9/0x630
[  239.240110]  ? _raw_spin_unlock_irq+0x1f/0x60
[  239.240419]  disk_release+0x143/0x490
[  239.240684]  ? disk_release+0x0/0x490
[  239.240964]  ? device_release+0x0/0x250
[  239.241252]  device_release+0xa2/0x250
[  239.241532]  ? device_release+0x0/0x250
[  239.241820]  kobject_put+0x173/0x280
[  239.242093]  put_device+0x1b/0x40
[  239.242369]  put_disk+0x41/0x60
[  239.242665]  loop_control_ioctl+0x4d1/0x630
[  239.242974]  ? loop_control_ioctl+0x0/0x630
[  239.243278]  ? selinux_file_ioctl+0xb1/0x270
[  239.243602]  ? loop_control_ioctl+0x0/0x630
[  239.243917]  __x64_sys_ioctl+0x19a/0x220
[  239.244225]  do_syscall_64+0x3b/0xa0
[  239.244499]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.244864] RIP: 0033:0x7fb520a8bb19
[  239.245117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.246424] RSP: 002b:00007fb51dfe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.246925] RAX: ffffffffffffffda RBX: 00007fb520b9f020 RCX: 00007fb520a8bb19
[  239.247409] RDX: 0000000000000004 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.247989] RBP: 00007fb520ae5f6d R08: 0000000000000000 R09: 0000000000000000
[  239.248560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.249142] R13: 00007ffcdd6281df R14: 00007fb51dfe0300 R15: 0000000000022000
[  239.249768]  </TASK>
[  239.249999] Modules linked in:
[  239.250291] CR2: ffffed100fffc000
[  239.250596] ---[ end trace 0000000000000000 ]---
[  239.251008] RIP: 0010:__memset+0x24/0x50
[  239.251389] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.252926] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.253387] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.254008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.254601] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.255203] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.255768] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.256351] FS:  00007fb51dfe0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.256973] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.257440] CR2: ffffed100fffc000 CR3: 000000003cfd0000 CR4: 0000000000350ee0
[  239.436156] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.436643] #PF: supervisor write access in kernel mode
[  239.436975] #PF: error_code(0x0002) - not-present page
[  239.437303] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  239.437728] Oops: 0002 [#6] PREEMPT SMP KASAN NOPTI
[  239.438054] CPU: 1 PID: 7379 Comm: syz-executor.7 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.438640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.439147] RIP: 0010:__memset+0x24/0x50
[  239.439421] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.440543] RSP: 0018:ffff88803a06fcc0 EFLAGS: 00010216
[  239.440878] RAX: 0000000000000000 RBX: ffff88800c002840 RCX: 1ffffe21fe600fc9
[  239.441324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.441766] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800508
[  239.442222] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.442673] R13: ffff88800c002840 R14: ffffffff815f27a0 R15: 1ffff11001122e1f
[  239.443119] FS:  00007faf39540700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.443622] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.443989] CR2: ffffed100fffc000 CR3: 000000003d17c000 CR4: 0000000000350ee0
[  239.444435] Call Trace:
[  239.444603]  <TASK>
[  239.444752]  kasan_unpoison+0x23/0x60
[  239.445002]  mempool_exit+0x1c2/0x330
[  239.445257]  bioset_exit+0x2c9/0x630
[  239.445512]  disk_release+0x143/0x490
[  239.445764]  ? disk_release+0x0/0x490
[  239.446033]  ? device_release+0x0/0x250
[  239.446295]  device_release+0xa2/0x250
[  239.446549]  ? device_release+0x0/0x250
[  239.446808]  kobject_put+0x173/0x280
[  239.447054]  put_device+0x1b/0x40
[  239.447281]  put_disk+0x41/0x60
[  239.447503]  loop_control_ioctl+0x4d1/0x630
[  239.447783]  ? loop_control_ioctl+0x0/0x630
[  239.448063]  ? selinux_file_ioctl+0xb1/0x270
[  239.448360]  ? loop_control_ioctl+0x0/0x630
[  239.448639]  __x64_sys_ioctl+0x19a/0x220
[  239.448909]  do_syscall_64+0x3b/0xa0
[  239.449156]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.449485] RIP: 0033:0x7faf3bfcab19
[  239.449719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.450836] RSP: 002b:00007faf39540188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.451309] RAX: ffffffffffffffda RBX: 00007faf3c0ddf60 RCX: 00007faf3bfcab19
[  239.451793] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.452270] RBP: 00007faf3c024f6d R08: 0000000000000000 R09: 0000000000000000
[  239.452749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.453224] R13: 00007ffebe77e85f R14: 00007faf39540300 R15: 0000000000022000
[  239.453705]  </TASK>
[  239.453868] Modules linked in:
[  239.454088] CR2: ffffed100fffc000
[  239.454323] ---[ end trace 0000000000000000 ]---
[  239.454636] RIP: 0010:__memset+0x24/0x50
[  239.454925] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.456117] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.456507] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.456974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.457449] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.457933] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.458406] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.458885] FS:  00007faf39540700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.459421] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.459816] CR2: ffffed100fffc000 CR3: 000000003d17c000 CR4: 0000000000350ee0
12:36:44 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:44 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:44 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:44 executing program 3:
r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000))
io_uring_enter(r0, 0x0, 0x0, 0x10, 0x0, 0x0)

12:36:44 executing program 7:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:44 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:44 executing program 2:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

[  239.657833] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.658313] #PF: supervisor write access in kernel mode
[  239.658650] #PF: error_code(0x0002) - not-present page
[  239.658992] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  239.659436] Oops: 0002 [#7] PREEMPT SMP KASAN NOPTI
[  239.659765] CPU: 1 PID: 7401 Comm: syz-executor.1 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.660381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.660913] RIP: 0010:__memset+0x24/0x50
[  239.661199] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.662374] RSP: 0018:ffff888041f37cc0 EFLAGS: 00010216
[  239.662724] RAX: 0000000000000000 RBX: ffff88800c002b40 RCX: 1ffffe21fe600fd5
[  239.663189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.663651] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800568
[  239.664110] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.664571] R13: ffff88800c002b40 R14: ffffffff815f27a0 R15: 1ffff1100112261f
[  239.665039] FS:  00007fa98b268700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.665561] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.665956] CR2: ffffed100fffc000 CR3: 000000002f01c000 CR4: 0000000000350ee0
[  239.666420] Call Trace:
[  239.666594]  <TASK>
[  239.666745]  kasan_unpoison+0x23/0x60
[  239.667005]  mempool_exit+0x1c2/0x330
[  239.667267]  bioset_exit+0x2c9/0x630
[  239.667523]  disk_release+0x143/0x490
[  239.667779]  ? disk_release+0x0/0x490
[  239.668044]  ? device_release+0x0/0x250
[  239.668310]  device_release+0xa2/0x250
[  239.668575]  ? device_release+0x0/0x250
[  239.668843]  kobject_put+0x173/0x280
[  239.669098]  put_device+0x1b/0x40
[  239.669333]  put_disk+0x41/0x60
[  239.669560]  loop_control_ioctl+0x4d1/0x630
[  239.669858]  ? loop_control_ioctl+0x0/0x630
[  239.670154]  ? selinux_file_ioctl+0xb1/0x270
[  239.670458]  ? loop_control_ioctl+0x0/0x630
[  239.670749]  __x64_sys_ioctl+0x19a/0x220
[  239.671028]  do_syscall_64+0x3b/0xa0
[  239.671288]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.671636] RIP: 0033:0x7fa98dcf2b19
[  239.671885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.673053] RSP: 002b:00007fa98b268188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.673553] RAX: ffffffffffffffda RBX: 00007fa98de05f60 RCX: 00007fa98dcf2b19
[  239.674030] RDX: 0000000000000007 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.674488] RBP: 00007fa98dd4cf6d R08: 0000000000000000 R09: 0000000000000000
[  239.674946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.675407] R13: 00007ffc5c27342f R14: 00007fa98b268300 R15: 0000000000022000
[  239.675877]  </TASK>
[  239.676035] Modules linked in:
[  239.676252] CR2: ffffed100fffc000
[  239.676479] ---[ end trace 0000000000000000 ]---
[  239.676791] RIP: 0010:__memset+0x24/0x50
[  239.677075] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.678253] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.678603] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.679064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.679565] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.680027] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.680495] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.680961] FS:  00007fa98b268700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.681480] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.681870] CR2: ffffed100fffc000 CR3: 000000002f01c000 CR4: 0000000000350ee0
12:36:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

[  239.740678] BUG: unable to handle page fault for address: ffffed100fffc000
[  239.741205] #PF: supervisor write access in kernel mode
[  239.741564] #PF: error_code(0x0002) - not-present page
[  239.741929] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  239.742391] Oops: 0002 [#8] PREEMPT SMP KASAN NOPTI
[  239.742736] CPU: 1 PID: 7404 Comm: syz-executor.2 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  239.743362] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  239.743905] RIP: 0010:__memset+0x24/0x50
[  239.744205] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.745425] RSP: 0018:ffff888042537cc0 EFLAGS: 00010216
[  239.745813] RAX: 0000000000000000 RBX: ffff88800c0029c0 RCX: 1ffffe21fe600fcf
[  239.746293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.746775] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800538
[  239.747261] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.747745] R13: ffff88800c0029c0 R14: ffffffff815f27a0 R15: 1ffff11001122a1f
[  239.748234] FS:  00007f52fca7b700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.748787] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.749194] CR2: ffffed100fffc000 CR3: 000000003ab56000 CR4: 0000000000350ee0
[  239.749696] Call Trace:
[  239.749887]  <TASK>
[  239.750042]  kasan_unpoison+0x23/0x60
[  239.750318]  mempool_exit+0x1c2/0x330
[  239.750601]  bioset_exit+0x2c9/0x630
[  239.750874]  disk_release+0x143/0x490
[  239.751152]  ? disk_release+0x0/0x490
[  239.751431]  ? device_release+0x0/0x250
[  239.751715]  device_release+0xa2/0x250
[  239.751986]  ? device_release+0x0/0x250
[  239.752275]  kobject_put+0x173/0x280
[  239.752543]  put_device+0x1b/0x40
[  239.752790]  put_disk+0x41/0x60
[  239.753032]  loop_control_ioctl+0x4d1/0x630
[  239.753341]  ? loop_control_ioctl+0x0/0x630
[  239.753652]  ? selinux_file_ioctl+0xb1/0x270
[  239.753990]  ? loop_control_ioctl+0x0/0x630
[  239.754306]  __x64_sys_ioctl+0x19a/0x220
[  239.754602]  do_syscall_64+0x3b/0xa0
[  239.754877]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  239.755243] RIP: 0033:0x7f52ff505b19
[  239.755503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  239.756755] RSP: 002b:00007f52fca7b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  239.757272] RAX: ffffffffffffffda RBX: 00007f52ff618f60 RCX: 00007f52ff505b19
[  239.757762] RDX: 0000000000000006 RSI: 0000000000004c81 RDI: 0000000000000005
[  239.758271] RBP: 00007f52ff55ff6d R08: 0000000000000000 R09: 0000000000000000
[  239.758743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.759224] R13: 00007fff4a5ca60f R14: 00007f52fca7b300 R15: 0000000000022000
[  239.759715]  </TASK>
[  239.759882] Modules linked in:
[  239.760120] CR2: ffffed100fffc000
[  239.760360] ---[ end trace 0000000000000000 ]---
[  239.760690] RIP: 0010:__memset+0x24/0x50
[  239.760983] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  239.762236] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  239.762606] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  239.763104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  239.763609] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  239.764105] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  239.764593] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  239.765096] FS:  00007f52fca7b700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  239.765653] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.766068] CR2: ffffed100fffc000 CR3: 000000003ab56000 CR4: 0000000000350ee0
[  239.845039] audit: type=1400 audit(1667219804.950:10): avc:  denied  { block_suspend } for  pid=7421 comm="syz-executor.3" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
12:36:45 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1, @write_sync_train_params={{0xc78, 0x9}, {0x6, 0x93d1, 0x5, 0x81}}}, 0xd)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f0000000940)=""/4096, 0x1000, 0x81, 0xffff5b4b})
preadv2(r2, 0x0, 0x0, 0x70e, 0x7, 0x8)
r4 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0)

12:36:45 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/202, 0xca)

12:36:45 executing program 6:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:45 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/202, 0xca)

12:36:45 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/202, 0xca)

12:36:45 executing program 7:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/202, 0xca)

[  240.453455] BUG: unable to handle page fault for address: ffffed100fffc000
[  240.454437] #PF: supervisor write access in kernel mode
[  240.455124] #PF: error_code(0x0002) - not-present page
[  240.455780] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  240.456657] Oops: 0002 [#9] PREEMPT SMP KASAN NOPTI
[  240.457312] CPU: 0 PID: 7402 Comm: syz-executor.5 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  240.458880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  240.460062] RIP: 0010:__memset+0x24/0x50
[  240.460609] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  240.462838] RSP: 0018:ffff888041d17cc0 EFLAGS: 00010216
[  240.463503] RAX: 0000000000000000 RBX: ffff88800c002d80 RCX: 1ffffe21fe600fde
[  240.464388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  240.465276] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed10018005b0
[  240.466158] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  240.467037] R13: ffff88800c002d80 R14: ffffffff815f27a0 R15: 1ffff110078cae1f
[  240.467917] FS:  00007f95135da700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  240.468916] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.469643] CR2: ffffed100fffc000 CR3: 0000000034d72000 CR4: 0000000000350ef0
[  240.470553] Call Trace:
[  240.470891]  <TASK>
[  240.471192]  kasan_unpoison+0x23/0x60
[  240.471689]  mempool_exit+0x1c2/0x330
[  240.472202]  bioset_exit+0x2c9/0x630
[  240.472695]  ? _raw_spin_unlock_irq+0x1f/0x60
[  240.473295]  disk_release+0x143/0x490
[  240.473813]  ? disk_release+0x0/0x490
[  240.474313]  ? device_release+0x0/0x250
[  240.474830]  device_release+0xa2/0x250
[  240.475333]  ? device_release+0x0/0x250
[  240.475847]  kobject_put+0x173/0x280
[  240.476338]  put_device+0x1b/0x40
[  240.476795]  put_disk+0x41/0x60
[  240.477238]  loop_control_ioctl+0x4d1/0x630
[  240.477806]  ? loop_control_ioctl+0x0/0x630
[  240.478364]  ? selinux_file_ioctl+0xb1/0x270
[  240.478954]  ? loop_control_ioctl+0x0/0x630
[  240.479513]  __x64_sys_ioctl+0x19a/0x220
[  240.480047]  do_syscall_64+0x3b/0xa0
[  240.480543]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  240.481201] RIP: 0033:0x7f9516064b19
[  240.481675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  240.483909] RSP: 002b:00007f95135da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  240.484856] RAX: ffffffffffffffda RBX: 00007f9516177f60 RCX: 00007f9516064b19
[  240.485744] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005
[  240.486641] RBP: 00007f95160bef6d R08: 0000000000000000 R09: 0000000000000000
[  240.487527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.488413] R13: 00007ffd498cda7f R14: 00007f95135da300 R15: 0000000000022000
[  240.489316]  </TASK>
[  240.489629] Modules linked in:
[  240.490054] CR2: ffffed100fffc000
[  240.490505] ---[ end trace 0000000000000000 ]---
[  240.491093] RIP: 0010:__memset+0x24/0x50
[  240.491642] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  240.493888] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  240.494554] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  240.495430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  240.496310] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  240.497186] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  240.498072] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  240.498956] FS:  00007f95135da700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000
[  240.499946] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.500671] CR2: ffffed100fffc000 CR3: 0000000034d72000 CR4: 0000000000350ef0
[  240.537577] BUG: unable to handle page fault for address: ffffed100fffc000
[  240.538229] #PF: supervisor write access in kernel mode
[  240.538718] #PF: error_code(0x0002) - not-present page
[  240.539180] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  240.539704] Oops: 0002 [#10] PREEMPT SMP KASAN NOPTI
[  240.540117] CPU: 1 PID: 7445 Comm: syz-executor.6 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  240.540923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  240.541468] RIP: 0010:__memset+0x24/0x50
[  240.541757] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  240.542966] RSP: 0018:ffff88803ac2fcc0 EFLAGS: 00010216
[  240.543432] RAX: 0000000000000000 RBX: ffff88804247d000 RCX: 1ffffe21ff392e68
[  240.543903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  240.544371] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed100848fa00
[  240.544843] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  240.545315] R13: ffff88804247d000 R14: ffffffff815f27a0 R15: 1ffff11001123e1f
[  240.545797] FS:  00007fb51dfe0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  240.546326] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.546706] CR2: ffffed100fffc000 CR3: 0000000016662000 CR4: 0000000000350ee0
[  240.547172] Call Trace:
[  240.547349]  <TASK>
[  240.547503]  kasan_unpoison+0x23/0x60
[  240.547765]  mempool_exit+0x1c2/0x330
[  240.548043]  bioset_exit+0x2c9/0x630
[  240.548319]  disk_release+0x143/0x490
[  240.548596]  ? disk_release+0x0/0x490
[  240.548878]  ? device_release+0x0/0x250
[  240.549171]  device_release+0xa2/0x250
[  240.549453]  ? device_release+0x0/0x250
[  240.549745]  kobject_put+0x173/0x280
[  240.550038]  put_device+0x1b/0x40
[  240.550297]  put_disk+0x41/0x60
[  240.550541]  loop_control_ioctl+0x4d1/0x630
[  240.550863]  ? loop_control_ioctl+0x0/0x630
[  240.551179]  ? selinux_file_ioctl+0xb1/0x270
[  240.551510]  ? loop_control_ioctl+0x0/0x630
[  240.551834]  __x64_sys_ioctl+0x19a/0x220
[  240.552136]  do_syscall_64+0x3b/0xa0
[  240.552409]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  240.552785] RIP: 0033:0x7fb520a8bb19
[  240.553055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  240.554359] RSP: 002b:00007fb51dfe0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  240.554905] RAX: ffffffffffffffda RBX: 00007fb520b9f020 RCX: 00007fb520a8bb19
[  240.555419] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000005
[  240.555944] RBP: 00007fb520ae5f6d R08: 0000000000000000 R09: 0000000000000000
[  240.556457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.556981] R13: 00007ffcdd6281df R14: 00007fb51dfe0300 R15: 0000000000022000
[  240.557487]  </TASK>
[  240.557661] Modules linked in:
[  240.557907] CR2: ffffed100fffc000
[  240.558165] ---[ end trace 0000000000000000 ]---
[  240.558505] RIP: 0010:__memset+0x24/0x50
[  240.558811] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  240.560126] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  240.560543] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  240.561052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  240.561579] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  240.562105] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  240.562620] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  240.563134] FS:  00007fb51dfe0700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  240.563712] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.564136] CR2: ffffed100fffc000 CR3: 0000000016662000 CR4: 0000000000350ee0
12:36:46 executing program 5:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:46 executing program 1:
mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040))
shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0)
pidfd_getfd(0xffffffffffffffff, r6, 0x0)

12:36:46 executing program 2:
r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@secondary)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "5e82da93c5739f4a25ba1022bda07b7cf2812820d96c55204cc29b4048bc1523cd5dcb3c836f71d106010beec261a9562562371e103b995c722a3e44dcc1236f"}, 0x48, r0)

12:36:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x41030)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)

12:36:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:46 executing program 7:
syz_mount_image$nfs4(&(0x7f0000003400), 0x0, 0x0, 0x1, &(0x7f0000003580)=[{&(0x7f00000034c0)='>', 0x1, 0x80000001}], 0x0, &(0x7f00000035c0))

12:36:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:46 executing program 2:
r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@secondary)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "5e82da93c5739f4a25ba1022bda07b7cf2812820d96c55204cc29b4048bc1523cd5dcb3c836f71d106010beec261a9562562371e103b995c722a3e44dcc1236f"}, 0x48, r0)

12:36:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:46 executing program 2:
r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@secondary)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "5e82da93c5739f4a25ba1022bda07b7cf2812820d96c55204cc29b4048bc1523cd5dcb3c836f71d106010beec261a9562562371e103b995c722a3e44dcc1236f"}, 0x48, r0)

[  241.727460] BUG: unable to handle page fault for address: ffffed100fffc000
[  241.728153] #PF: supervisor write access in kernel mode
[  241.728618] #PF: error_code(0x0002) - not-present page
[  241.729082] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0
[  241.729677] Oops: 0002 [#11] PREEMPT SMP KASAN NOPTI
[  241.730162] CPU: 1 PID: 7473 Comm: syz-executor.5 Tainted: G      D            6.1.0-rc3-next-20221031 #1
[  241.731015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  241.731749] RIP: 0010:__memset+0x24/0x50
[  241.732141] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  241.733755] RSP: 0018:ffff888039787cc0 EFLAGS: 00010216
[  241.734240] RAX: 0000000000000000 RBX: ffff88804247d180 RCX: 1ffffe21ff392e6e
[  241.734863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  241.735493] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed100848fa30
[  241.736135] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  241.736761] R13: ffff88804247d180 R14: ffffffff815f27a0 R15: 1ffff11007f3001f
[  241.737397] FS:  00007f95135da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  241.738104] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.738604] CR2: ffffed100fffc000 CR3: 000000003658a000 CR4: 0000000000350ee0
[  241.739211] Call Trace:
[  241.739439]  <TASK>
[  241.739644]  kasan_unpoison+0x23/0x60
[  241.739984]  mempool_exit+0x1c2/0x330
[  241.740335]  bioset_exit+0x2c9/0x630
[  241.740671]  disk_release+0x143/0x490
[  241.741014]  ? disk_release+0x0/0x490
[  241.741353]  ? device_release+0x0/0x250
[  241.741705]  device_release+0xa2/0x250
[  241.742061]  ? device_release+0x0/0x250
[  241.742409]  kobject_put+0x173/0x280
[  241.742741]  put_device+0x1b/0x40
[  241.743060]  put_disk+0x41/0x60
[  241.743358]  loop_control_ioctl+0x4d1/0x630
[  241.743744]  ? loop_control_ioctl+0x0/0x630
[  241.744124]  ? selinux_file_ioctl+0xb1/0x270
[  241.744522]  ? selinux_file_ioctl+0x2/0x270
[  241.744914]  ? loop_control_ioctl+0x0/0x630
[  241.745296]  __x64_sys_ioctl+0x19a/0x220
[  241.745667]  do_syscall_64+0x3b/0xa0
[  241.746011]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[  241.746466] RIP: 0033:0x7f9516064b19
[  241.746795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  241.748327] RSP: 002b:00007f95135da188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.748983] RAX: ffffffffffffffda RBX: 00007f9516177f60 RCX: 00007f9516064b19
[  241.749591] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005
[  241.750216] RBP: 00007f95160bef6d R08: 0000000000000000 R09: 0000000000000000
[  241.750812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.751412] R13: 00007ffd498cda7f R14: 00007f95135da300 R15: 0000000000022000
[  241.752021]  </TASK>
[  241.752229] Modules linked in:
[  241.752514] CR2: ffffed100fffc000
[  241.752818] ---[ end trace 0000000000000000 ]---
[  241.753218] RIP: 0010:__memset+0x24/0x50
[  241.753582] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 <f3> 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00
[  241.755115] RSP: 0018:ffff88803d12fcc0 EFLAGS: 00010216
[  241.755575] RAX: 0000000000000000 RBX: ffff88800c0020c0 RCX: 1ffffe21fe600fab
[  241.756177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000
[  241.756780] RBP: ffff88800c01ca00 R08: 0000000000000005 R09: ffffed1001800418
[  241.757391] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c01ca00
[  241.757997] R13: ffff88800c0020c0 R14: ffffffff815f27a0 R15: 1ffff1100111881f
[  241.758597] FS:  00007f95135da700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000
[  241.759281] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.759779] CR2: ffffed100fffc000 CR3: 000000003658a000 CR4: 0000000000350ee0
12:36:47 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 2:
r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@secondary)
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "5e82da93c5739f4a25ba1022bda07b7cf2812820d96c55204cc29b4048bc1523cd5dcb3c836f71d106010beec261a9562562371e103b995c722a3e44dcc1236f"}, 0x48, r0)

12:36:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000000)=0xfffffffa, 0x4)

12:36:47 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0xffffffffffffffff)

12:36:47 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={0x0, 0xf, 0xffffffffffffffb7, @broadcast}, 0x10)

12:36:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
keyctl$session_to_parent(0x12)

12:36:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 2:
openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x44080, 0x0)

12:36:47 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

12:36:47 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)

12:36:47 executing program 4:
futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0)

12:36:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2fef89006aa5564d3c00"})

12:36:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2fef89006aa5564d3c00"})

12:36:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
openat(0xffffffffffffff9c, 0x0, 0x80540, 0x1)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2dfab6ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00')
pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0)
syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)

12:36:47 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x0)

12:36:47 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2fef89006aa5564d3c00"})

12:36:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000000000000180000000ae6000000004cda6b337b1a31c68f62560ed3a59b805f233d1428c45005402aec1dc58d3aef3d4da0ee46d8ad9a78853988c258e6e359e5268bbe957d12b8c5153c9d4af6", @ANYRES32=r0])
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x6, 0x4, 0x9, 0x0, 0x0, 0x58020, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5b2, 0x9}, 0x19000, 0x8, 0x0, 0x6, 0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x8, r0, 0xc)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

[  242.905775] audit: type=1400 audit(1667219808.012:11): avc:  denied  { associate } for  pid=7545 comm="syz-executor.4" name="ssh.service" dev="cgroup2" ino=1076 scontext=system_u:object_r:restorecond_exec_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1
12:36:48 executing program 5:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280))
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x14006, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0)
setsockopt$inet_group_source_req(r2, 0x6, 0x2c, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:36:48 executing program 4:
pipe(&(0x7f0000001540)={<r0=>0xffffffffffffffff})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
tee(r1, r0, 0xb824, 0x0)

12:36:48 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$TCSETS(r0, 0x80045430, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "2fef89006aa5564d3c00"})

[  243.103600] audit: type=1400 audit(1667219808.210:12): avc:  denied  { write } for  pid=7554 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:36:48 executing program 0:
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000007, 0x32, 0xffffffffffffffff, 0x0)

12:36:48 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xee00)

12:36:48 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x9, r0, 0x8)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="e69595f873ac99d1e17b71e714e4ffff0100000000080000000000000000"], 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(0x0, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
fallocate(r1, 0x4, 0x5, 0x100000000)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x9}, 0x1c)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffe}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20041)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000004280)={0x0, <r5=>0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003280)={0x0, r5, "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", "bc814f1e421304699c87988d578a0a83e359f4c0be15077dc7547e05d8d3e86fd0a544b052031ab5435bfa1d3cb761dcf3cc5ed23c524ee1c3178c0b78972b97712343f0c489b8dc22aebc61c82ede5b06d0e78af78d2c0971f7ddbc5f5698fb66c6bd36db6289222aee97a1cc0492740d3d84eadcfeb2c8965cbeaae9f381cfc6c2849b0371e0ee8119179cf7cd82c855e1ccac83bec9af15fadec7884bf4458259dfc82682c66b53620ff2f6d83326671102337965af980249343ed01173744daff6b3c705225d7faf6c85bf102f18aca5d8e229fd8179954945de7f1ab059a15f9786b194654c5bf732f9fb83e1f985654347ca65022de65f67320a0fb2281737a3ddf710c645ac69a8453c3b70d560ef653514dbc0eb06b73b4f633188a7ab2f36d7e3bbfb71f498dcd599e9fd4e6f73a8e06d625a58bbd0c63cdf50ce7d5064c21e75b92f44506d720b89550cdc8227f32f25510ed8d4e441b132d9f7157acf293ee3c0d44d072b5e81c4c39e2fab668f3f30bf3035931c93df026b41f33c15cb08b55c00ff2d6ef5171a481b0ee2282dc2306971d73c1cbc21bf01b23ca4936e4f4518207e0e94c2973e709b24d13b63657f4d1689f7a4f779640aab3a4e7a6e3b6e4040a71078569f33fdbc35c23e8b030cd07eabbf542244241463937f1189c328a6d0967c65ff5307ba71311ed83289d2a24db12b38ba399932cf0d921bdc2d4ca64bcae4c28622cb69509089aea132e1237f33da2e7ba216cd610a8dfdac60c089260ae5e5e827d133e72deeadccf2dc14bcdaf270aa9d9072b2098ce65738896a1d908e2d6cf42f90216e5e5dc2d48b458d3bf901fa68d4f4bcc95dd145354329baaa5f6d72983b3c5cdb6e6e90e754ea3d9ca286313655ad326ed5f017e1424b7573918e3acf96644835c09be7085b043ec416b97a6eae45df8d312519f14ce8469386f97e85509d5cb90d8b1d66dc72219176ec5022edd76c02ea8e723ec7086f40788f45c37df77eb877d2654b3a2009d603cf223f93b5cd83f846da8e75ecbfffc4d6f11a11a7ddb8744cbd0c82f156e5915a2c879efb00f48afda0580b980ea0143a2bb111cd59371e954e5593fb3f4d14190056333fde9e40806269380381fee347b43bb345e50eb065dfd65e4202bb532bc36742828d898d86337d87416018d2246aa621726b376fcf2d229d8c9703f0f6607703e1b939a5023bbae5528a3aa4a24736a444ca1cb8c3075a110414c1629bbcd5c9c4e4080aa44674a34f5c31347e5bca2052fba2e27ed084449da3314358cb192065e1999982b95cc18a488e3189c404c3ba2262b424553e425ac01a78c7aab15e48b2d78837ca0127b1bf28bdd46e14e58c0717687acea3fef73e035c0b6f482fbfeabace42db1aa83a1f3644f9e63c87afc3afab26090af7e7c4fb1b81f8b01bc4e4814be39b0325a270657954f26af83a20d130ed6220a5212205440bb48fbbbc07a7b18cd0bd96d3a250c66bb93454f074a1ddcb836e3ab6af4153058cd94f16d9641f3929087c2ed87e20527eca22b3b3ac62c00f0620d5f28c518c5d03d8f180fe524bfc79c8e8577cc576192ce0547242e747351cde648664691f455e03064f57196524c8e3370efaa64ac28e09b1f2d2b6d69723885f294ea2df1cec3dd25c87883ab65aee612d325eb04cfaaa41d340f65c5745a14fc541902bf299f97f848034fa5a9968fd052087eb5fe6eebb232146191f1fec644d61aeee0ac3c218fbdc077f5c11ee746bcf9197db06ac78f5aa56b64a361ee6ff35efbf679482673cf5d5c51755f33d7a4af59a06484e787df20d684a78754634e651ca76e042643c0b60a22c2a2815619a958ace318639757e7a16d80add9fa9a61fe8ab4de921736de7b75af95bf9b57417451f9d812ccf4db0dd46acfad3136ad94dda1cc622a83daa02181a9f2e7607c77c3d6fd032289f93a1a18f7508366b96c6cd4d6bbff2b3c249b16d205f6369ac1d5af8a4e81400bdf93c820ae6f3622569b20410973a7f58ea541f64e977fb730c853d5fa809cc57b65c54e786641d28be2750dc637a794332163c972c896ae4d86296ddc39c3d433b546b9d7dbe67bb43c129aad2c32dc68d8dc26e489682e00ab92a16bdbbdd5ad803a0ae91a5af285db0fb6b8d118f2d0f120cc1667530bfb4c32b4fa4caf1192a035aafb458f311a04b6491014f0629d86a712a356ff2bac0df5b6c497ba5852e452b226718bea604d2fef071f443c055318045fcd5eea0062432fcadd11f93f0c152e01ff5d1f510f63b6266ae1b314ce06b4f6a388dbeccb7d257e6f3d82b0c23be3bc134bb127b0bf82bd7dada2c645e37621858fdd650fb213ddf61d07e46b8eb24cfa0b66f38f7a90f7d4d3439e701b8b0e36514b5a333d4b8c3439c3f67f074f45776c888d00f5e2fdfa65c175330253d3e032a9442ea08a54fa661c1784ff4a01d90f28a2936659d2d1bb6a2670438a3ac7864b17ed1cada9ca479045db0162297973861fdf6f6fc724543181133f201dcc4035f75585b3d3fce08eb8454b45b87a8055cb14ebcabd324feeb73c46c57b5d4e0de70863920b422952049f756d578971ee1c583a17467258324e13f349f8d36aa55820a7e76e51c4afa0b8c4f664432c5ad089aa79a39a2a6e4ab46b48f5b69ea6cfc5944b3e058bc837bc556b28351895734acfa3693f1537b58374bd39c5cca45e1ad9232a15554f1046f3cd60cbf78e5819de443b14d4887d83f14e5d944b8fb8fd678d6decafe117f93fc8cc44d3f6190c0f9f66100ee9f58818fa36b5e3e45c53fdf90587f3afeb9e3a62e74a999f1628f55c8980268ab73e66f5403873d0fe421da4eb22dd9afdfea0e1e960f9dcd6383e262151cfd63587d15009a930a44e63b559f063f9cfa75661a7866faedc287c534beb7b9113a01c0ece0e4f18cddbe482b7f4810683a3fdf61ea161c8f24a099310ce3e2e822ae0b659e6bfa78289bef995e2f45805c2881eec6453c5f07067d760c8774495a0c184eb6db75f17a7033ea4b652abbd1e806f668e84f7b8ab761ea4502e78294eeecef8b22760c4936901943b2387682c08459b2ec5a02ce17df9d0327e516aa2284b438acfb5f7e0ab4999114d1e039492a2034dbab39c8f1ca39de84f9fb4bf2ebe267c4510b0b196317e0ea392cfbc216bc51d82671ba50be6bb66a32ab9e5df046be877180e9ec84cd35296881af635f0a3ff4b9f675068e31579be666c0b1989af184aac44101383ca5a6b25c6554cd716c76631bda53456a35466256f02a9aa4587b918e2fad906b8464197b8989f6600a71d77bb51424e5589bfeb3d03e78820e627ace0ef66b74cdb15de646d2c42dfd36a45c751f92ec0ca4735e928f1a83ca8a489cd45f61bab6da8f5fcdafc174d55ee1d1a3c82ddfbe7063162f95545dab3dc82deb11f1819e679707cb8c44c268234057d1cdd8048169355d57c1f524e7e997b085d99655831f72df213772eaf96b71a86719b14fd334bab58b80feba7b9ec5173621367d1937407d7710489d66b84da940b8139aabd13eb484320eea59ada26b5267e3f10d0bbe24af0d99c7527dff570287d1c77e8272ef5aef7745e483acb5854c7f650f229af8e653ad245f3fc30b5401fb2f9da69451b4e6e470dccbb4a8e01a32d5c2b481610fd3d0c918021582f1be03590387cdc4ee70f94a6492afe660d7ee72978574ad92ba4c97181dff483291d8cd89eaaec13ec3e7c4c89040e843b17531f24b406dd3f8aa93e9c5770b2499941f7270ebca618e9ca258c7ebbf90ecf4ad27cfd89e560ef73f74c8cdedce8542fe658050bab5d7f2e32e639c69f2c1663634c6ea9186d9afbb6924489fb60250a2dcf769ccec3a8528c66f5dec199b04fdb4fdef8b9d917667a3ca1950cf970b7b8000bad56b6300d4c0dcc497e0d0d1574ce447c075098cc1d7b4b070833105e718f322694634c2d2734ddd7e61b62163db4f63ab39840fab2090bd75a750855ee9091ee5ead23614e8b04bcf25b718db19d6d38f14cba33548033d6ef99f86e940f55f1fbe001a8f508a82ff6f758b39826b087c274e7b383f1e8825edef09450d7eec345f2b553e1bc3e2404a6acd7d743b4713150c35543b2bab1b3c881baa7855a230986e9c030e7b54a6b8b50419848beb755458efa6142f43a1d3b4d14c482683a9dcce9105a1ee96dbe339f910afc267968d7a05f019d2bf128884ad73dba7257c21a15d7a45b1c11dfe18bd077c6c57377baeae5b87a74101b4467bc26d18131f21f2ef22a46cf80461c118aae318078561af2668f700339665b8d552c182419f816a2d73ab6e64354a198688078ad244a0b91fbc3de5f645971306f4979605ee2c373f8a49e6a8f397ddcd9e952a8695f5326f9ccd365a8b873851c4ad578b57c223b6fde3ea6e8fd5dc9093f5fe190f2d58c76d0d4fe18486403c0abcf55b626c9f935fbcebd30e716d541868a777d3880c4fb47edfcf364246996a24088dfcfafa7c1220efd38c356e5ede5ef9b6b2046937b50523fe4565bb0e08a0514fdae54da25338c316a379c12669d2bdd416632965aa23a137c86cbb0682fa5e84a659753ecd8059bb03c3fdb69fbf1b15f875cb34463fbdbde6b6933730776837b9c5175107227367d1eda9f4a39146b6692e183163ea7159c68aa3bf7d2b33d2bd5d549254cb946a2657cbef0919ab14c87931269698f40d1b389abb63807056bf7e25e1e52b9bd110e09c10baf28722a380a29ee3556236778aa3594d9f4ffff2f9f5072f7891cd3a5c58909ea8f41701604ee58eb1935bf1c0dbc3a98617686043ef2a3abbeacd433ba7a4185a1fa195e77b4ab3f07a617b5ef6cb3d22868c62a5be213765c9aef4ee5a22b241f798a2c89e2fc5155d5ecc2cbb589ed3be1974b21ff8874088236dbaf1f49174a8ce77286086e171c1e80493820734e8bff23341b868816d05e1813239397abe41729ab28eca7af82c75f78bdfa82ef5614cad6612ce43c29364759bbbacbcbb62dd8b11b5be653766143a86bef63dc914f09338bf1dd352804c3cff83b36f4092c960376244ac278aa6f2ab043fcab03e283569d6ac6b485a110c33f6a238cfd7a7d26e2c81698d6c9c86575b5e7ed305a643966fc5424f4d679839a34d3d65a7d561a11f5dfe30ac2732f331aa5120e994996c8ec290fd16c9a50b4763ca33595b081963ab6820b1306556419c3baf600ecdcc27069499986df8592c956168a81b8294155bee6dbf55352d401fcf0acc4f5ac67e9b12af83ec34a8bd4f4d9dedce46cc798c06d7210da9aef6fcb186d00a3a16bbc043cd45d05a72e79b6fdb5f927a3f906ce6603d3c23c7cba45d834c3e6d942ea0ea69ccb9ab65e9be0627ab1351"})
write$sndseq(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x4, 0xfd, @tick=0x10001, {}, {0x7}, @time=@tick=0x4}], 0x1c)

12:36:49 executing program 6:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

12:36:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r0, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0xa, 0xfffffffffffffff7, 0xa6)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpgid(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)
utimensat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}, 0x100)

12:36:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000020000100000000000000000001"], 0x14}], 0x1}, 0x0)

12:36:49 executing program 7:
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140))

12:36:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
openat(0xffffffffffffff9c, 0x0, 0x80540, 0x1)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2dfab6ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00')
pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0)
syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)

12:36:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

[  243.983276] 9pnet_fd: p9_fd_create_unix (7584): problem connecting socket: ./file0: -111
12:36:49 executing program 6:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

12:36:49 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10})

[  244.030373] 9pnet_fd: p9_fd_create_unix (7590): problem connecting socket: ./file0: -111
12:36:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

[  244.100697] EXT4-fs warning (device sda): verify_group_input:174: Bad blocks count 0
12:36:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

12:36:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

12:36:50 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

12:36:50 executing program 6:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

12:36:50 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)

12:36:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x2)

12:36:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xa015000)
r1 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r0, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000380)=']p\"\xae\x06\xc40\x1a\x1a\\\x9e\x8a\x17@)#\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004I\x1c4P\x0e\xc4!\xc9\xece\x84\x85\xf2\xdb\xd3\xa7_\xe5\x95\x04\xdae\xca\xfd\xe2\xd1\xc5\x13\xf3u\xea\xc0\xb5b[\x9adH~\n\xe1\x86\x1f\xe7s\x04\xe8\xf2$\xae\xa8\xe7\xbd\x05\xb0B\xf2\x9cp\xc73\x9db\xc4\xe8EC\xbd\xc9\xf8\x0e\xd7\x1b\x11\xaf\xbf<D-\a\xf6\x15\xc1]\xc8\x85\xee\xe5\x1e\x0e\xda\x18\xd4^\xe7\x048\x9fN\xf2\xbaI\\\xc2\xa5\xf4\xe2L\xa9{=\xcd\xcf\xff\xb3\x83\x9d/\x00'/162, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x11, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0xa, 0xfffffffffffffff7, 0xa6)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpgid(0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)
utimensat(r4, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)={{}, {0x0, 0x2710}}, 0x100)

12:36:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21)
openat(0xffffffffffffff9c, 0x0, 0x80540, 0x1)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB="440a2dfab6ee34d3d2a0"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00')
pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x402180, 0x0)
syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x251, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(r2, &(0x7f0000000680)='./file1\x00', 0x101, 0xb8)
pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
memfd_create(&(0x7f0000000440)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\xe3g\v\xca(\x96\xe1C\xdf\x1c\xea\x85CD1\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r,\x87\xe6]^j\xcd\x06\xea\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfeW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\x7f\n\x1a\xda.\x94kJ\xe2\x82_\x8905\xcc\xb0\xc6\x94\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba`\x14\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3\x04\x00\x00\x00T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f 4|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bwEI\xb1\x00'/567, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, 0x0, 0x100000)

12:36:50 executing program 5:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001280))
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x14006, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0)
setsockopt$inet_group_source_req(r2, 0x6, 0x2c, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108)
clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:36:50 executing program 6:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)

12:36:50 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)


VM DIAGNOSIS:
12:36:41  Registers:
info registers vcpu 0
RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82451091 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff88803d12f530
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001
R12=0000000000000039 R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451080
RIP=ffffffff824510e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f52fca5a700 00000000 00000000
GS =0000 ffff88806d000000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0f287d9000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0f287d7000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffed100fffc000 CR3=0000000038d86000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000000 RBX=ffff88806d109880 RCX=0000000000000001 RDX=1ffff1100da21310
RSI=ffffffff8168149d RDI=ffff88806d10988c RBP=0000000000000003 RSP=ffff88806d109798
R8 =ffffffff85cf084a R9 =ffffffff85cf084e R10=ffffed100da21304 R11=ffff88806d1097f8
R12=ffff88806d109880 R13=0000000000000000 R14=ffff88802eb50000 R15=ffff88802eed0de0
RIP=ffffffff8137610b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555555857400 00000000 00000000
GS =0000 ffff88806d100000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe6ddf0ae000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe6ddf0ac000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc2dbe65998 CR3=0000000030ba4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000